Replacing The Default Secure-Site Certificate - Edge-Core ECS4610-24F Management Manual

| Security Measures
C 13
HAPTER
Configuring HTTPS
R
EPLACING THE
D S -
EFAULT ECURE SITE
C
ERTIFICATE
Use the Security > HTTPS (Copy Certificate) page to replace the default
secure-site certificate.
When you log onto the web interface using HTTPS (for secure access), a
Secure Sockets Layer (SSL) certificate appears for the switch. By default,
the certificate that Netscape and Internet Explorer display will be
associated with a warning that the site is not recognized as a secure site.
This is because the certificate has not been signed by an approved
certification authority. If you want this warning to be replaced by a
message confirming that the connection to the switch is secure, you must
obtain a unique certificate and a private key and password from a
recognized certification authority.
For maximum security, we recommend you obtain a unique
C :
AUTION
Secure Sockets Layer certificate at the earliest opportunity. This is because
the default certificate for the switch is not unique to the hardware you have
purchased.
When you have obtained these, place them on your TFTP server and
transfer them to the switch to replace the default (unrecognized) certificate
with an authorized one.
The switch must be reset for the new certificate to be activated. To
N :
OTE
reset the switch, see "Resetting the System" on page 120
at the commad prompt: ES-3026#
CLI R
EFERENCES
"Web Server" on page 678
◆
P
ARAMETERS
These parameters are displayed in the web interface:
TFTP Server IP Address – IP address of TFTP server which contains
◆
the certificate file.
Certificate Source File Name – Name of certificate file stored on the
◆
TFTP server.
Private Key Source File Name – Name of private key file stored on
◆
the TFTP server.
Private Password – Password stored in the private key file. This
◆
password is used to verify authorization for certificate use, and is
verified when downloading the certificate to the switch.
Confirm Password – Re-type the string entered in the previous field
◆
to ensure no errors were made. The switch will not download the
certificate if these two fields do not match.
– 274 –
reload
or type "reload"