Chatsworth Products KVM Over IP - Manual (Page 52)

52
3.6.4 Certificate
The IP console uses the Secure Socket Layer (SSL) protocol for any encrypted network traffic
between itself and a connected client. During the connection establishment the IP console has
to expose its identity to a client using a cryptographic certificate. The default certificate that
comes with the IP console upon delivery is for testing purposes only. The system administrator
should not rely on this default certificate as the secured global access mechanism through
Internet.
However, it is possible to generate and install a new base64 X.509 certificate that is unique for a
particular IP console. In order to do that, the IP console is able to generate a new cryptographic
key and the associated Certificate Signing Request (CSR) that needs to be certified by a
certification authority (CA). A certification authority verifies that you are the person who you
claim you are, and signs and issues a SSL certificate to you.
The following steps are necessary to create and install a SSL certificate for the IP console:
1. Create a SSL Certificate Signing Request using the panel shown in the figure below. You
need to fill out a number of fields that are explained below. Once this is done, click on the
button “Create” which will initiate the Certificate Signing Request generation.
Certificate Settings Dialog
• Common name: This is the network name of the IP console once it is installed in the
user's network (usually the fully qualified domain name). It is identical to the name that is
used to access the IP console with a web browser (without the “http://” prefix). In case
the name given here and the actual network name differ, the browser will pop up a
security warning when the IP console is accessed using HTTPS.
• Organizational unit: This field is used for specifying to which department within an
organization the IP KVM Switch belongs.
• Organization: The name of the organization to which the IP KVM Switch belongs.