Ju
ne
20
18
170 Legrand PDU User Guide
Setting Up an SSL/TLS Certificate
Important: Legrand uses TLS instead of SSL 3.0 due to published security vulnerabilities in SSL 3.0. Make sure
your network infrastructure, such as LDAP and mail services, uses TLS rather than SSL 3.0.
Having an X.509 digital certificate ensures that both parties in an SSL/TLS connection are who they say they
are.
Besides, you can create or apply for a multi-domain certificate with subject alternative names.
To obtain a CA-signed certificate:
1. Create a Certificate Signing Request (CSR) on the Legrand PDU. See
Creating a CSR
(on page 170).
2. Submit it to a certificate authority (CA). After the CA processes the information in the CSR, it provides
you with a certificate.
3. Import the CA-signed certificate onto the Legrand PDU. See
Installing a CA-Signed Certificate
(on
page 171).
Note: If you are using a certificate that is part of a chain of certificates, each part of the chain is signed during
the validation process.
A CSR is not required in either scenario below:
Make the Legrand PDU create a
self-signed
certificate. See
Creating a Self-Signed Certificate
(on
page 172).
Appropriate, valid certificate and key files are already available, and you just need to import them. See
Installing or Downloading Existing Certificate and Key
(on page 173).
Creating a CSR
Follow this procedure to create the CSR for your Legrand PDU.
Note that you must enter information in the fields showing the message 'required.'
To create a CSR:
1. Choose Device Settings > Security > SSL Certificate.
2. Provide the information requested.
Subject:
Field
Description
Country
The country where your company is located. Use the standard ISO
country code. For a list of ISO codes, visit the
ISO website
(
The full name of the state or province where your company is located.
Locality
The city where your company is located.
Organization
The registered name of your company.
Organizational Unit The name of your department.
Common Name
The fully qualified domain name (FQDN) of your Legrand PDU.
Email Address
An email address where you or another administrative user can be
reached.
Warning: If you generate a CSR without values entered in the required fields, you cannot obtain
third-party certificates.
Subject Alternative Names:
