Linkskey LKV-9208IP - Manual (Page 57)

Prima IP User Guide Rev. 1.6
4.4 MAIN/ Security – Certificates Installation,
Viewer Encryption And Password Policies
The Security page enables you to configure and implement security-related settings
of your PRIMA IP, such as uploading your certificates for the PRIMA IP server side,
selecting the security level of the viewer connections, and also the password policy
for the viewer and browser connections.
After you have made all modifications, click Store Settings to save your settings and
then hit Apply Settings / Restart Servers to validate these new settings. Every change
you have made on this page will NOT apply until you hit Apply Settings / Restart
Servers
!
Certificates and Keys
Certificates are only needed if you intend to implement full PKI authentication for the
viewer connections.
If an SSL-encrypted session is already enough for your security requirements, you
can just ignore this aspect of PKI authentication.
Where can you get the certificates? There are a default set of certificates in your
support CD ROM. You can use them to practice the certificates uploads. In real world
scenario, you can either generate the certificates by yourself, since there are some
freeware or shareware such as XCA for this purpose. Or you can buy certificates from
companies that provide authentication service.
The valid file names and formats of the certificates and Keys to be uploaded to the
PRIMA IP should be exactly as below:
•
root.crt
•
server.crt.
•
serverkey.pem
•
ldapcert.crt
•
ldapkey.pem
- 53 -