Linkskey LKV-9208IP - Manual (Page 26)

Prima IP User Guide Rev. 1.6
2.7 Install Certificates On Prima IP
You could use the default set of certificates (could be found on CD-ROM) to practice making some PKI
- authenticated connections as long as your network safety is not jeopardized. We advise that it is better to do
the practices within your Local Area Network, which is supposed to be well secured with adequate firewall and
other due precautions against network intrusions. Or if you have already obtained a set of certificates with the
file names and formats required by Prima IP, you can then use them for Prima IP viewer authentication.
However, if you simply use the default set of certificates that comes with Prima IP, anybody who has a copy of
the default certificates may establish a connection to your servers. . So we strongly recommend that you obtain
your own certificates for Prima IP or go forth to generate them using software like XCA ….. For certificate
generation using XCA, please refer to How to Generate Prima IP Certificates using XCA (could be found on the
Prima IP support CD-ROM).
First you have to have these certificates ready on your client computers for uploading
to Prima IP via a Web browser. If you haven’t obtained your own Prima IP certificates,
you can use the default set of certificates (could be found on the Prima IP support
CD-ROM).
Certificates for the PKI Authentication to be installed on Prima IP:
(1) the root certificate (root.crt)
(2) the server certificate (server.crt), and
(3) the server private key (serverkey.pem)
Certificates for the LDAP Authentication to be installed on Prima IP:
(1) the LDAP certificate (ldapcert.crt)
(2) the LDAP private key (ldapkey.pem)
Step 1: Access Prima IP Web Management Interface and go to the Security page.
Step 2: Click the Browse Button and use the Choose File dialog box to browse to your
certificate files ….
- 22 -