SMC Networks 6152L2 - annexe 1 Management Manual page 122

C
ONFIGURING THE
CLI – This example enables the HTTP secure server and modifies the
port number.
Console(config)#ip http secure-server
Console(config)#ip http secure-port 441
Console(config)#
Replacing the Default Secure-site Certificate
When you log onto the web interface using HTTPS (for secure access), a
Secure Sockets Layer (SSL) certificate appears for the switch. By default,
the certificate that Netscape and Internet Explorer display will be
associated with a warning that the site is not recognized as a secure site.
This is because the certificate has not been signed by an approved
certification authority. If you want this warning to be replaced by a
message confirming that the connection to the switch is secure, you must
obtain a unique certificate and a private key and password from a
recognized certification authority.
Caution: For maximum security, we recommend you obtain a unique
When you have obtained these, place them on your TFTP server, and use
the following command at the switch's command-line interface to replace
the default (unrecognized) certificate with an authorized one:
Console#copy tftp https-certificate
TFTP server ip address: <server ip-address>
Source certificate file name: <certificate file name>
Source private file name: <private key file name>
Private password: <password for private key>
Note: The switch must be reset for the new certificate to be activated. To
reset the switch, type:
3-76
S
WITCH
Secure Sockets Layer certificate at the earliest opportunity.
This is because the default certificate for the switch is not
unique to the hardware you have purchased.
Console#reload
4-41
4-42
4-84