Allied Telesis AT-S63 - Manual (Page 756)

Chapter 32: Web Server
756 Section VIII: Management Security
General Steps for Configuring the Web Server for Encryption
There are several procedures you need to perform in order to implement
HTTPS and web browser encryption on the switch. This section is here to
provide you with the general steps you need to do and the procedures for
performing them. There is a section for configuring the web server with a
self-signed certificate and another for a public or private CA certificate.
General Steps for
a Self-signed
Certificate
Below are the general steps for setting up the web server with a self-
signed certificate.
1. Set the switch’s date and time. You must do this before you create a
certificate because the date and time are stamped in the digital
document. For instructions, refer to “Setting the System Time” on
page 67.
2. Create a public and private key pair, as explained in “Creating an
Encryption Key” on page 767.
3. Create a self-signed certificate using the key pair, as explained in
“Creating a Self-signed Certificate” on page 793.
4. Add the certificate to the certificate database, as explained in “Adding
a Certificate to the Database” on page 797.
5. Configure the web server on the switch by activating HTTPS and
specifying the key pair used to create the certificate as the active key.
This step is explained in “Configuring the Web Server” on page 753.
General Steps for
a Public or
Private CA
Certificate
Below are the steps for setting up the web server with a public or private
CA certificate. This requires generating an enrollment request.
1. Set the switch’s date and time. You must do this before you create the
enrollment request. The date and time at stamped in the request. The
instructions for this are in “Setting the System Time” on page 67.
2. Create a key pair, as explained in “Creating an Encryption Key” on
page 767.
3. Generate an enrollment request, as explained in “Generating an
Enrollment Request” on page 808.
4. Upload the enrollment request from the AT-S63 file system onto your
management station or a TFTP server, as explained in “Uploading a
System File” on page 252.
5. Submit the enrollment request to the public or private CA.