Certificate Usage - HP MSM3xx Management And Configuration Manual

Security
Managing certificates
Note
When a web browser connects to the AP using SSL, the AP sends only its own SSL certificate
to the browser. This means that if the certificate has been signed by an intermediate
certificate authority, and if the web browser only knows about the root certificate authority
that signed the public key certificate of the intermediate certificate authority, the web
browser does not get the whole certificate chain it needs to validate the identity of the AP.
Consequently, the web browser issues security warnings.
To avoid this problem, install an SSL certificate on the AP only if it is directly signed by the
root certificate authority or if you have appended all certificates that make up the chain.
Consequently, the web browser issues security warnings.
To avoid this problem, make sure that you install the entire certificate chain when you install
a new certificate on the AP.
Note
If you enable the Notifications option on the Management > SNMP page and then select
Configure Notifications and enable the Certificate about to expire notification under
Maintenance, an SNMP notification is sent to let you know when the AP SSL certificate is
about to expire.

Certificate usage

To see the services that are associated with each certificate, select Security > Certificate
usage. With the factory default certificates installed, the page will look like this:
Service
Name of the service that is using the certificate. To view detailed information on the
certificate select the service name.
Authenticate to peer using
Name of the certificate and private key. The AP is able to prove that it has the private key
corresponding to the public key in the certificate. This is what establishes the AP as a
legitimate user of the certificate.
Number of associated CAs
Number of CA certificates used by the service.
6-16