HP IAP Version 2.0 Administrator Guide (July 2008)

Table 21 Link to Firewall Settin gs view
Origin
Link
left menu General Configuration > Firewall Settings
SSL Configurati
on
SSL, or Secure Socket Layer, is a technology that allows web browsers and web servers to communicate
over a secured connection. This means that the data being sent is encrypted by one side, transmitted,
then decrypted by the other side before processing. It is a two-way process, m e aning tha t both the ser ver
AND the browser encrypt all traffic before sending out data.
The SSL Configuration view lets you generate certificate signing requests (CSRs) , and corresponding
private keys, for secured connections on the IA P. You can create two types of CSRs: one for access to the
PCC portal, a
nd one for access to the HTTP por tals.
After generating the CSRs, see “Installing a third party certificate on the PCC portal” on page 38 and
“Installing a third party certificate on the HTT P portals” on page 3 9 for the steps needed to complete
the process.
The SSL Confi
guration view contains two areas. The top area shows any current cer tificate signing
requests i
n the system. The bottom area contains a form to complete to g enerate a certifica te signing
request (CSR) and RSA private key.
Table 22 Link to SSL Configuration view
Origin
Link
left menu General Co
nfiguration > SSL Configuration
Available certificate signing requests
Table 23 Available certificatesigningrequests(CSRs)intheIAP
Feature
Description
Machine Type
The host for which the CSR has been generated. The host is either a
PCC or HTTP portal.
Virtual IP
The virtual IP address of the host.
Creation Date
The date the CSR was created.
Path
The path t
otheCSR.TheCSRfiles are always placed on the PCC host.
API port configuration
There is also an API Port Configuration section which allows you to select one of two connections for
accessing the IAP API. The IAP API can be accessed: either via an encrypted Secure Connection (SSL)
or by using a Clear Text Connection (unencrypted). To change between the two options, select the
preferred configuration and click the App ly button. Pleasenotethatusingthecleartextconnection
could impose a security risk as the network communication between the IAP and client applications is
not protected this way.
Creati
ng a certificate signing request
To crea
te a certificate signing request (CSR):
Administrator Guide
37