HP 635n - JetDirect IPv6/IPsec Print Server How To Use Manual page 65

Notice the RootCA is "self-signed". All Root CAs will be self-signed – these CAs represent the single
point of trust. A logical question would be: "Which CA do I configure on Jetdirect?" Let's look at
diagrams. First, we have an incorrect configuration, as shown in Figure 27 –
some
Incorrect HP Jetdirect CA
R2's Info +
R2's Public Key
RootCA's Digital
Signature
R2's Certificate
R2's Info +
R2's Public Key
RootCA's Digital
Signature
hpprinter's configured
CA Certificate
Figure 27 – Incorrect HP Jetdirect CA Configuration.
The Subordinate CA cannot be used as the CA certificate on Jetdirect!
Now we can look at a correct configuration in Figure 28 – Correct HP Jetdirect CA
Configuration.
Configuration.
Root Certificate Authority: RootCA
Subordinate Certificate Authority: R2
What Certificates should be configured on
Jetdirect so that 802.1X will be successful?
INCORRECT!
hpprinter.example.internal
65
RootCA.example.internal
RootCA's Certificate
R2.example.internal
hpprinter's Info +
hpprinter's
Public Key
R2's Digital
Signature
hpprinter's Identity
Certificate
RootCA's Info +
RootCA's
Public Key
RootCA's Digital
Signature