Secure Sockets Layer (Ssl) Server Certificates; Certificate Signing Request (Csr) - Dell PS-M4110 User Manual

Login Type
Related Links

Secure Sockets Layer (SSL) Server Certificates

Secure Sockets Layer (SSL) Server Certificates
CMC includes a Web server that is configured to use the industry-standard SSL security protocol to transfer encrypted
data over the Internet. Built upon public-key and private-key encryption technology, SSL is a widely accepted technique
for providing authenticated and encrypted communication between clients and servers to prevent eavesdropping
across a network.
SSL allows an SSL-enabled system to perform the following tasks:
• Authenticate itself to an SSL-enabled client.
• Allow the client to authenticate itself to the server.
• Allow both systems to establish an encrypted connection.
This encryption process provides a high level of data protection. CMC employs the 128-bit SSL encryption standard, the
most secure form of encryption generally available for Internet browsers in North America.
The CMC Web server includes a Dell self-signed SSL digital certificate (Server ID). To ensure high security over the
Internet, replace the Web server SSL certificate by submitting a request to CMC to generate a new Certificate Signing
Request (CSR).

Certificate Signing Request (CSR)

A CSR is a digital request to a certificate authority (referred to as a CA in the Web interface) for a secure server
certificate. Secure server certificates ensure the identity of a remote system and ensure that information exchanged
with the remote system cannot be viewed or changed by others. To ensure the security for your CMC, it is strongly
recommended that you generate a CSR, submit the CSR to a certificate authority, and upload the certificate returned
from the certificate authority.
A certificate authority is a business entity that is recognized in the IT industry for meeting high standards of reliable
screening, identification, and other important security criteria. Examples of CAs include Thawte and VeriSign. After the
certificate authority receives your CSR, they review and verify the information the CSR contains. If the applicant meets
the certificate authority's security standards, the certificate authority issues a certificate to the applicant that uniquely
identifies that applicant for transactions over networks and on the Internet.
After the certificate authority approves the CSR and sends you a certificate, you must upload the certificate to the CMC
firmware. The CSR information stored on the CMC firmware must match the information contained in the certificate.
NOTE: To configure SSL settings for CMC, you must have Chassis Configuration Administrator privilege.
NOTE: Any server certificate you upload must be current (not expired) and signed by a certificate authority.
Related Links
Generating a New Certificate Signing Request
Uploading Server Certificate
76
Certificate Type How to Obtain
NOTE: CMC ships with a default
self-signed SSL server certificate.
The CMC Web server and Virtual
Console use this certificate.