NetLinx Security within the Web Server
85
NI-3101-SIG Signature Series NetLinx Integrated Controller
11. Once the returned CA certificate has been received, follow the procedures outlined in the following
section to import the returned certificate (over a secure connection) to the target Master.
Server - Importing a CA created SSL Certificate
Before importing a CA server certificate:
First, have a self-generated certificate installed onto the target Master.
Secondly, enable the SSL security feature from the Enable Security page, to establish a secure
connection to the Master prior to importing the encrypted CA certificate. Refer to theSecurity
- System Level Security page section on page 49 for more information about enabling SSL
security.
1. Take the returned certificate (signed by the CA and encrypted with new information which makes it
different from the text string that was previously sent) and copy it into the clipboard.
2. Navigate to the Server Certificate page by clicking System Settings > Manage System > Server >
Import SSL Certificate to open the Import Certificate page (FIG. 51).
3. Place the cursor within the empty window and paste the raw text data (in its entirety) into the field.
4. Click the Update button to enter the new encrypted certificate information and save it to the Master.
A certificate consists of two different Keys:
Master Key is generated by the Master and is incorporated into the text string sent to the CA
during a certificate request. It is specific to a particular request made on a specific Master.
Public Key is part of the text string that is returned from the CA as part of an approved SSL
Server Certificate. This public key is based off the submitted Master key from the original
request.
Regenerating a previously requested and installed certificate invalidates the previously
purchased certificate because the Master Key has been changed.
FIG. 51 Import SSL Certificate dialog
Certificate text field
Once a certificate has been purchased from an external CA and then installed onto a
specific Master, DO NOT regenerate the certificate or alter its properties
(example: bit length, city, etc.). If the purchased certificate is regenerated, it becomes
invalid.
To Next Page
Loading...
Need help?
General
