HP X Unified Security Platform Series Instrukcja Użytkownika Pobierz pdf (Strona 276)

Chapter 9 Authentication

260 X Family LSM User’s Guide V 2.5.1

Configure CRL Parameters for a CA Certificate

STEP 1

From the LSM menu, select Authentication > X.509 Certificates.

STEP 2

On the CA Certificate page in the Current CA Certificates table, locate the CA Certificate that

you want configure. Then, in the Function(s) field, click the Edit icon.

STEP 3

On the X.509 CA Certificate Details page in the Certificate Revocation List, select File.

Then, type the File path and name for the CRL, or click Browse and navigate to the file.

STEP 4

Click Import.

STEP 5

To configure the CRL for automatic update, select the URL radio button. Then:

• type the URL used to retrieve the CRL from the Certificate Authority.

• type the Update Interval in hours. This specifies how often the device queries the CA

website to check for updates.

•Click Set.

Certificate Requests

Certificate Requests provide X family administrators with a form and encoding method to generate a

signed Local Certificate from the CA server.

After generating the Certificate Request, the administrator has to export the request, and then provide

it to the CA server. The CA server signs the request to generate a Local Certificate and returns the

signed certificate to the administrator who then imports it back into the X family device. A successful

import of the Local Certificate removes the corresponding Certificate Request as the request has now

been satisfied. After importing a Local Certificate, you can view and manage it from the Local

Certificates page.

The device uses PKCS#10 format for Certificate Requests. When a request is created, a Distinguished

Name (DN) and a public/private key pair is generated, and the public key is included in the PKCS#10

format.

You can manage Certificate Requests from the LSM. From the Certificates Request page, you can:

• View Certificate Requests currently available.

• Create a Certificate Request.

• Export the request so it can be submitted to the Certificate Authority.

• Import a signed Certificate Request that has been returned by the Certificate Authority so it is

available for use on the system.

1 2 ... 271 272 273 274 275 276 277 278 279 280 281 ... 332 333

Brak uwag

HP X Unified Security Platform Series Instrukcja Użytkownika Strona 276