Uploading Server Certificates; Removing Server Certificates - McAfee EPOCDE-AA-BA - ePolicy Orchestrator - PC Product Manual

Task
1 Click Menu | Configuration | Server Settings.
2 Select Certificate Based Authentication and click Edit.
Click Browse next to CA certificate for client certificate (P7B, PEM).
3
Navigate to and select the certificate file, then click OK.
4
5 If you have a Certificate Revoked List (CRL) file, click Browse next to this edit box, navigate to the CRL
file, and click OK.
Click Save to save all changes.
6
Restart ePolicy Orchestrator to activate certificate authentication.
7

Uploading server certificates

Servers require certificates for SSL connections providing increased security than standard HTTP
sessions.
Before you begin
To upload a signed certificate, you must have already received a server certificate from a
Certificate Authority (CA).
It is possible to create self-signed certificates instead of using externally signed ones, though this
carries slightly higher risk. This task can be used to initially configure certificate-based authentication,
or modify an existing configuration with an updated certificate.
Task
For option definitions, click ? in the interface.
1 Click Menu | Configuration | Server Settings.
Select Certificate Based Authentication and click Edit.
2
Select Enable Certificate Based Authentication.
3
Click Browse next to CA certificate for client certificate (PKCS7, PEM encoded, DER encoded, or PKCS12 file with extension
4
like .cer, .crt, .pem, .der, .p12, .p7b). Navigate to and select the certificate file and click OK.
If you have provided a PKCS12 certificate file, enter a password and alias name as appropriate.
5
6 If you want to provide a Certificate Revoked List (CRL) file, click Browse next to Certificate Revoked List
file (PEM) . Navigate to and select the CRL file and click OK.
The CRL file must be in PEM format.
Click Save to save all changes.
7
Restart the server to enable the Certificate Based Authentication settings changes.
8

Removing server certificates

Server certificates can and should be removed if they are no longer used.
Before you begin
The server must already be configured for certificate authentication before you can remove
server certificates.
Configuring advanced server settings
® ®
McAfee ePolicy Orchestrator
Authenticating with certificates
4.6.0 Software Product Guide
7
59