P74238ea_F1DE101G-man.qxd
28-04-2003
Certificate Request Required Information
However, it is possible to generate and install a new certificate that is unique
for a particular card. In order to do that, the RIPC is able to generate a
new cryptographic key and the associated Certificate Signing Request that
needs to be certified by a certification authority (CA). A certification
authority verifies that you are who you claim you are and signs and issues
a SSL certificate to you.
The following steps are necessary to create and install the RIPC's
SSL certificate:
1. Create a SSL Certificate Signing Request using the panel shown in the
Figure below (Security Settings
certificate). Fill out a number of fields that are explained in the table
above. Once this is done, click "Create CSR" which will initiate the
Certificate Signing Request generation. The CSR can be downloaded to
your administration machine with the "Download CSR" button
(see Figure below).
2. Send the saved CSR to a CA for certification. You will get the new
certificate from the CA after a traditional authentication process.
3. Upload the certificate to the RIPC using the Upload panel as shown in the
Figure below.
09:33
Page 26
SECURITY
SSL Settings
Create your own SSL
26
SECURITY
SSL Certificate Signing Request
Note: If you destroy the CSR on the RIPC, there is no way to get it back! If you
delete it by mistake, repeat the three steps.
Settings & Configuration Network
Network Settings Parameters
Parameter
Description
IP address
IP address in the usual dot notation.
Subnet mask
The net mask of the local network.
Gateway IP address
The gateway of the network.
1. DNS Server IP
IP address of the primary Domain Name Server in dot notation. This
option may be left empty, however, the RIPC won't be able to perform
name resolution.
2. DNS Server IP
IP address of the secondary Domain Name Server in dot notation. It
will be used in case the Primary DNS Server can't be contacted.
Enable Power
If this option is enabled, access over the Power Management Unit is
Management Unit
possible. For this reason, to ensure the best level of security, we
recommend you disable this parameter.
(Note: Changing the network settings of the RIPC might result in lost connections.
If you change the settings remotely, be sure all the values are correct so that you
will still be able to access the RIPC.)
27