Table 2-11 Https Administration - Fujitsu SPARC Enterprise M4000 User Manual

1. Construct the self CA for the XSCF.
2. Create a web server private key for the XSCF.
3. Make a web server certificate self-signed by the XSCF.
4. Enable https.
When one option of the sethttps(8) command for the self-authentication is
specified, the settings for
When the XSCF Unit is redundant, the https settings are automatically applied to
■
the standby XSCF Unit.
TABLE 2-11
https Administration
TABLE 2-11
Item Description
Display https Displays the https settings.
setting
Information on whether https is enabled or
disabled and key states are displayed.
Enabling/ Enables or disables https.
disabling
External When the external CA and CA in Intranet are
authentication used, set the following.
• Create a web server private key of XSCF
• Make the Certificate Signing Request (CSR)
by XSCF and Request the issue of the
certificate to CA.
• Import a web server certificate to XSCF.
Self Automatically, the self CA is constructed in
authentication XSCF and the certificate is installed.
The following are set.
• A self CA is constructed
• A private key is made
• A web server certificate self-signed is made
Display the Displays the following:
certificate
• CSR
• Web server certificate
2-56 SPARC Enterprise Mx000 Servers XSCF User's Guide • April 2008
Step 1
lists setting items and the corresponding shell commands.
- Step 3 above are automatically completed at a time.
Shell Command
showhttps
sethttps
sethttps
sethttps
showhttps
Remarks
Specify the following
Distinguished Name for
making a CSR.
• Country (2 letter: Ex.US,
JP), Province, Locality,
Organization,
Organizational unit,
Common name (Your name
or web server host name),
email address of
administrator
Specify the same DN as the
External authentication at
making a web server
certificate.
The certificate expiration of
the self-CA is as follows:
• Server certificate: 10 year
The set value becomes
effective, when the certificate
will be created next time.