beautypg.com

4 certificate – PLANET IKVM-8000 User Manual

Page 55

background image

If set to “Force”, the applet tries to make an encrypted connection.

An error will be reported in case connection establishment fails.

5.5.4 Certificate

The IKVM-8000 uses the Secure Socket Layer (SSL) protocol for any encrypted

network traffic between itself and a connected client. During the connection

establishment the IKVM-8000 has to expose its identity to a client using a

cryptographic certificate. Upon delivery, this certificate and the underlying secret

key is the same for all IKVM-8000 ever produced and certainly will not match the

network configuration that will be applied to the IKVM-8000 by its user. The

certificate's underlying secret key is also used for securing the SSL handshake.

Hence, this is a security risk (but far better than no encryption at all).

However, it is possible to generate and install a new certificate that is unique for a

particular IKVM-8000. In order to do that, the IKVM-8000 is able to generate a new

cryptographic key and the associated Certificate Signing Request (CSR) that

needs to be certified by a certification authority (CA). A certification authority

verifies that you are the person who you claim you are, and signs and issues a SSL

certificate to you.

The following steps are necessary to create and install a SSL certificate for the

IKVM-8000:

50