HP X Unified Security Platform Series Manuale Utente Scaricare il pdf (Pagina 288)

Appendix A Browser Certificates

272 X Family LSM User’s Guide V 2.5.1

Client Authentication Message

The X family device uses the same HTTPS channel to communicate with other products as it does to

communicate with LSM. During the SSL handshake, the device asks for a client certificate for

validation. This is meant for other products; however, LSM users may also be prompted for a client

certificate. You can ignore this dialog.

To remove this warning, you can create and install a personal certificate on your workstation.

The following Procedures detail how to create and install the personal certificate:

• “Creating a Personal Certificate” on page 272

• “Installing the Personal Certificate” on page 272

Creating a Personal Certificate

The following command generates a self-signed certificate good for 10 years. The user must have

access to a computer with OpenSSL installed on it. For the latest copy of OpenSSL, go to the OpenSSL

web site: http://www.openssl.org

STEP 1

Enter the following command:

openssl req -new -x509 -days 3650 -out cert.pem -keyout privkey.pem

This command creates two files:

cert.pem

and

privkey.pem

STEP 2

Enter the following command:

openssl pkcs12 -export -in cert.pem -inkey privkey.pem -out

to_import.p12

This command creates the import file:

to_import.p12

Installing the Personal Certificate

The following instructions detail how to create the personal certificate. During the procedure, you will

import the file called to_import.p12.

Figure A–1: Client Authentication Dialog Box

1 2 ... 283 284 285 286 287 288 289 290 291 292 293 ... 332 333

Nessun commento

HP X Unified Security Platform Series Manuale Utente Pagina 288