APC Network Management Card AP9617 Guía de usuario descargar pdf (Pagina 164)

®®

USER’S GUIDE

network management card

157

Method 2: Use the APC Security Wizard to create a CA certificate and a

server certificate.

You use the APC Security Wizard to create two digital

certificates:

• A CA root certificate (Certificate Authority root certificate) that the APC

Security Wizard uses to sign all server certificates and which you then

install into the certificate store (cache) of the browser of each user who

needs access to the Management Card.

• A server certificate that you upload to the Management Card. When

the APC Security Wizard creates a server certificate, it uses the CA

root certificate to sign the server certificate.

The Web browser authenticates the Management Card sending or

requesting data:

• To identify the Management Card, the browser uses the common name

(IP address or DNS name of the Management Card) that was specified

in the server certificate’s distinguished name when the certificate was

created.

• To confirm that the server certificate is signed by a “trusted” signing

authority, the browser compares the signature of the server certificate

with the signature in the root certificate cached in the browser. An

expiration date confirms whether the server certificate is current.

This method has the following advantages and disadvantages.

• Advantages:

– Before they are transmitted, the user name and password for

Management Card access and all data to and from the

Management Card are encrypted.

– The length of the public key (RSA key) that is used for encryption

when setting up an SSL session is 1024 bits, providing more

complex encryption and consequently a higher level of security

1 2 ... 159 160 161 162 163 164 165 166 167 168 169 ... 189 190

Sin comentarios

APC Network Management Card AP9617 Guía de usuario Pagina 164