15: Security Settings
PremierWave® XC HSPA+ Intelligent Gateway User Guide
107
To Configure an Existing SSL Credential
Follow these steps after a new credential has been established via
Using Web Manager
To configure an existing SSL Credential, click
SSL
in the menu, select
Credentials
, and click
on the name of an existing SSL credential.
Using the CLI
To enter the SSL command level:
enable -> ssl
To enter the Credential command level:
enable -> ssl -> credentials
Using XML
Include in your file:
<configgroup name=”ssl”>
and
<configitem name=”credentials” instance=”
name
”>
and
<value name="RSA certificate"/>
or
<value name="DSA certificate"/>
Organization Unit
Enter the organizational unit to be associated with the new self-signed
certificate.
Common Name
Enter the common name to be associated with the new self signed
certificate, preferably matching the host name or the ip address of the
device, whichever will be the intended access approach. This is a required
field.
Expires
Enter the expiration date, in mm/dd/yyyy format, for the new self-signed
certificate.
Example: An expiration date of May 9, 2018 is entered as 05/09/2018.
Type
Select the type of key:
RSA
= Public-Key Cryptography algorithm based on large prime
numbers, invented by Rivest Shamir and Adleman. Used for encryption
and signing.
DSA
= Digital Signature Algorithm also based on large prime numbers,
but can only be used for signing. Developed by the US government to
avoid the patents on RSA.
Key Length
Select the bit size of the new self-signed certificate. Choices are:
512 bit
768 bit
1024 bit
2048 bit
4096 bit
The larger the bit size, the longer it takes to generate the key.
Submit (key)
Click the
Submit
button after setting the information for new self-signed
certificate.
Certificate Generation
Settings (continued)
Description