Downloading Ssl Certificates And Diffie-Hellman Files - HP PS1810 Management And Configuration Manual

Security
Secure Connection

Downloading SSL Certificates and Diffie-Hellman Files

Use the Update Manager page to download a public key certificate that has been signed by another
server, or a root certificate that has been signed by a certificate authority. You can also download Diffie-
Hellman (DH) encryption parameter files, which establish the algorithms for encrypting key exchanges.
Before you download a file to the switch, the following conditions must be true:
■
■
■
Use the following procedures to download an SSL certificate or DH files.
1.
The Update Manager page displays.
Figure 5-3. Using Update Manager to Download Certificates
2.
3.
4.
5.
6.
7.
5-4
The file is on the server in the appropriate directory.
The file is in the correct format.
The switch has a path to the server.
Click Download Certificates.
Select the protocol to use, based on the server type that the certificate is stored on: TFTP or HTTP.
For an HTTP upload, browse for the file on your local computer or network.
For a TFTP upload, enter the Server IP address, and specify the File Path and File Name.
From the Update Type field on the File Download page, select one of the following:
SSL Trusted Root Certificate PEM File: SSL Trusted Root Certificate File (PEM Encoded)—An
•
SSL certificate that has been digitally signed by a certificate authority.
SSL Server Certificate PEM File: SSL Server Certificate File (PEM Encoded)—An SSL certificate
•
that has been signed by another server.
• SSL DH Weak Encryption Parameter PEM File or SSL DH Strong Encryption Parameter PEM File—DH
certificates provide the algorithms for encrypting key exchanges and are used independent of
the certificate. The weak version uses a cipher strength of 512 bits and the strong version uses
a cypher strength of 1024 bits. Browser settings determine which DH file parameters are
requested at the start of the SSL session.
Click Download.
To view that status of the update, you can view the Status > Log page.
To return to the Secure HTTP Configuration page, click Security > Secure Connection in the
navigation pane.
To enable the HTTPS admin mode, select Enable from the HTTPS Admin Mode field, and then click
Apply.