Using Certificates In Https Clusters - Coyote Point Systems E350GX Installation And Administration Manual

Appendix E:

Using Certificates in HTTPS Clusters

The sections below tell you how to get your Layer 7 HTTPS clusters running with certificates. Please read these
sections completely before beginning to work with certificates on Equalizer.
While this document tells you all you need to know to use certificates with HTTPS clusters, it is not a primer on
HTTPS, SSL, or certificates. There are many resources on the Internet, in trade publications, and in books on these
topics. Most SSL certificate vendors offer basic SSL overviews on their websites.
Using Certificates in HTTPS Clusters ..................................................................................................278
About Server Certificates ................................................................................................................278
About Client Certificates ..................................................................................................................279
General Certificate Guidelines ........................................................................................................279
Software vs. Hardware Encryption/Decryption ................................................................................280
Using Certificates in a Failover Configuration .................................................................................280
Enabling HTTPS with a Server Certificate ...........................................................................................280
Enabling HTTPS with Server and Client Certificates .........................................................................281
Generating a CSR and Getting It Signed by a CA ..............................................................................282
Generating a CSR using OpenSSL .................................................................................................282
Generating a Self-Signed Certificate ...................................................................................................283
Preparing a Signed CA Certificate for Installation .............................................................................283
Installing Certificates for an HTTPS Cluster .......................................................................................284
Using IIS with Equalizer ........................................................................................................................286
Generating a CSR and Installing a Certificate on Windows Using IIS .............................................286
Converting a Certificate from PEM to PKCS12 Format ......................................................................287
Private Key Storage for Cluster Certificates .......................................................................................288
Clearing Secure Key Storage on Xcel I ...........................................................................................289
Configuring Cipher Suites ....................................................................................................................289
Default Cipher Suites ......................................................................................................................289
Updating the Cipher Suites Field .....................................................................................................289
No Xcel (Software) and Xcel II Cipher Suites ..................................................................................290
Xcel I Cipher Suites .........................................................................................................................290
Equalizer Installation and Administration Guide 277