Allied Telesis AT-S63 - Manual (Page 690)

Chapter 30: Web Server
690 Section VII: Management Security
General Steps for Configuring the Web Server for Encryption
There are several procedures you need to perform in order to implement
HTTPS and web browser encryption on the switch. This section is here to
provide you with the general steps that you need to do to and the
procedures for performing them. There is a section for configuring the web
server with a self-signed certificate and another for a public or private CA
certificate.
General Steps for
a Self-signed
Certificate
Below are the general steps for setting up the web server with a self-
signed certificate.
1. Set the switch’s date and time. You must do this before you create a
certificate because the date and time are stamped in the digital
document. For instructions, refer to “Setting the System Time” on
page 58.
2. Create a public and private key pair, as explained in “Creating an
Encryption Key” on page 705.
3. Create a self-signed certificate using the key pair, as explained in
“Creating a Self-signed Certificate” on page 729.
4. Add the certificate to the certificate database, as explained in “Adding
a Certificate to the Database” on page 733.
5. Configure the web server on the switch by activating HTTPS and
specifying the key pair used to create the certificate as the active key.
This step is explained in “Configuring the Web Server” on page 687.
General Steps for
a Public or
Private CA
Certificate
Below are the steps for setting up the web server with a public or private
CA certificate. This requires generating an enrollment request.
1. Set the switch’s date and time. You must do this before you create the
enrollment request. The date and time at stamped in the request. The
instructions for this are in “Setting the System Time” on page 58.
2. Create a key pair, as explained in “Creating an Encryption Key” on
page 705.
3. Generate an enrollment request, as explained in “Generating an
Enrollment Request” on page 744.
4. Upload the enrollment request from the AT-S63 file system onto your
management station or a TFTP server, as explained in “Uploading a
System File” on page 222.
5. Submit the enrollment request to the public or private CA.