User guide

Chapter 7: Security Menu and Forms 61
Figure 7.5: Expert - Physical Ports Default Factory Settings
Security certificates
The Cyclades CS console server generates its own self-signed SSL certificate for HTTPS using
OpenSSL.
ICertificate for HTTP security
A certificate for HTTP security is created by a Certificate Authority. Certificates are most
commonly obtained through generating public and private keys using a public key algorithm like
RSA or X.509. The keys can be generated by using a key generator software. The procedure to
obtain a Signed Digital Certificate is documented in the Cyclades CS Console Server Command
Reference Guide.
User configured digital certificate
You can generate a self-signed digital certificate. It is highly recommended that you use the openssl
tool to generate a self-signed certificate and replace the console server generated certificate.The
procedure to configure a self-signed digital certificate is documented in the Cyclades CS Console
Server Command Reference Guide.
X.509 certificate on ssh
The OpenSSH software included with the console server has support for X.509 certificates. The
administrator must activate and configure the SSH to use X.509. In order to implement
authentication of SSH sessions through exchange of X.509 certificates please refer to the
configuration procedures described in the Cyclades CS Console Server Command Reference Guide.