Loading ...
Loading ...
Loading ...
Managing and Verifying a Key and Certiî ´cate
9665-059
T
o encrypt communication with TLS when using Remote UI, or to use TLS as the IEEE 802.1X authentication method, a
key and certiî ´cate are required In addition, depending on the communicating device, encrypted communication using
a speciî ´ed certiî ´cate may be requested, thereby requiring a key and certiî ´cate.
Managing a Key and Certiî ´cate
You can prepare a key and certiî ´cate using the follo
wing methods:
Generating a Key and Certiî ´cate on the Machine
Generate the key and certiî ´cate required for TLS on the machine. You can immediately communicate where
self-signed certiî ´cates are allowed.
Generating a Key and Certiî ´cate(P
. 276)
Registering a Certiî ´cate Issued by a Certiî ´cate Authority in a Self-generated Key
When a key is generated on the machine, generate a Certiî ´cate Signing Request (CSR), have the certiî ´cate
authority issue a certiî ´cate, and then register that certiî ´cate in the key.
Generating a Key and Certiî ´cate Signing Request (CSR) and Obtaining and Registering a
Certiî ´cate(P
. 278)
Registering a Certiî ´cate Obtained from an SCEP Server to a Self-generated Key
When generating a key on the machine, request a Simple Certiî ´cate Enrollment Protocol (SCEP) server to
issue a certiî ´cate, and then register the obtained certiî ´cate. You can also request that a certiî ´cate be issued
at a speciî ´ed date and time.
Generating a Key and Obtaining and Registering a Certiî ´cate fr
om an SCEP Server(P. 281)
Registering a Key and Certiî ´cate or CA Certiî ´cate Obtained from an Issuing Authority
Register a key and certiî ´cate obtained from an issuing authority or a CA certiî ´cate issued by a certiî ´cate
authority, without self-generating the key and certiî ´cate. You can use a digital certiî ´cate that matches the
communicating device and authentication level.
Registering a Key and Certiî ´cate or CA Certiî ´cate Obtained fr
om an Issuing Authority(P. 288)
Verifying a Certiî ´cate
You can conî ´gur
e the settings to verify the validity of a certiî ´cate that the machine receives from a certiî ´cate
authority, using the Online Certiî ´cate Status Protocol (OCSP).
Verifying a Received Certiî ´cate with OCSP(P. 290)
Security
275
Loading ...
Loading ...
Loading ...