
10: Security Settings
XPort AR User Guide 92
2. Enter or modify the fields in Table 10-6.
Table 10-6 SSL Fields
Field Description
Upload Certificate
New Certificate This certificate identifies the XPort AR to peers. It is used for HTTPS and
SSL Tunneling. Enter the path and name of the certificate you want to
upload, or use the Browse button to select the certificate. RSA or DSA
certificates with 512 to 1024 bit public keys are allowed.
Note: The file format must be PEM. The file must start with “-----BEGIN
CERTIFICATE-----“ and end with “-----END CERTIFICATE-----“. Some
Certificate Authorities add comments before and/or after these lines. Those
need to be deleted before upload.
New Private Key Enter the path and name of the private key you want to upload, or use the
Browse button to select the private key. The key needs to belong to the
certificate entered above.
Note: The format of the file must be PEM. The file must start with “-----
BEGIN RSA PRIVATE KEY-----” and end with “-----END RSA PRIVATE
KEY-----”. Read DSA instead of RSA in case of a DSA key. Some Certificate
Authorities add comments before and/or after these lines. Those need to be
deleted before upload.
Upload Authority Key
Authority One or more authority certificates are needed to verify a peer's identity. It is
used for SSL Tunneling. These certificates do not require a private key.
Enter the path and name of the certificate you want to upload, or use the
Browse button to select the certificate. RSA or DSA certificates with 512 to
1024 bit public keys are allowed.
Note: The format of the file must be PEM. The file must start with “-----
BEGIN CERTIFICATE-----” and end with “-----END CERTIFICATE-----”.
Some Certificate Authorities add comments before and/or after these lines.
Those need to be deleted before upload
.
Create New Self-Signed Certificate
Country Enter the 2-letter country code to be assigned to the new self-signed
certificate. Examples: US for United States and CA for Canada
State/Province Enter the state or province to be assigned to the new self-signed certificate.
Locality Enter the city or locality to be assigned to the new self-signed certificate.
Organization Enter the organization to be associated with the new self-signed certificate.
Example: If your company is called Widgets, and you are setting up a web
server for the Sales department, enter Widgets for the organization.
Organization Unit Enter the organizational unit to be associated with the new self-signed
certificate. Example: If your company is setting up a web server for the Sales
department, enter Sales for your organizational unit.
Expires Enter the expiration date, in mm/dd/yyyy format, for the new self-signed
certificate. Example: An expiration date of May 9, 2010 is entered as 05/09/
2010.
Kommentare zu diesen Handbüchern