Technical data

ServerIron ADX Graphical User Interface Guide 103
53-1002412-01
Chapter
8
Security Settings
In this chapter
•SSL certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
•SSL profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
•Access Control Lists. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
SSL certificates
The Secure Sockets Layer (SSL) protocol provides security and privacy between client and server
over the Internet. SSL supports server and client certificate verification, and negotiates encryption
keys and authenticates the server before data is exchanged by the high-level applications. SSL on
the ADX device provides hardware-accelerated encryption and decryption services to the clients.
The SSL “handshake” is a key concept in the SSL protocol. The handshake involves server
authentication and an optional client certificate verification. In server authentication, the server
sends its certificate and the cipher preferences to a client that has made a request. The client then
generates a master key, encrypts it with the public key of the server, and returns the encrypted
master key to the server.
Generating private keys
A key pair file specifies the location for retrieving SSL asymmetric key pair during an SSL
handshake. You can generate key pair file locally on a device or import a pre-existing key pair.
To generate an SSL key, perform the following steps within the Configure tab.
1. Click Security on the menu bar.
2. From the sidebar, select SSL.