Management and Configuration Guide (Includes ACM xl) 2005-12

ProCurve Secure Access 700wl Series Management and Configuration Guide 6-35
Configuring the Network
Figure 6-17. The Certificate Signing Request
You can use this certificate signing request either to request a certificate from a CA, or to create
your own self-signed certificate using an SSL toolkit, such as OpenSSL.
Step 4. You may be able to paste this signing request directly into a form on your CA’s web site. To do
so, connect to your CA’s web site and begin the certificate request process. Copy the CSR
(including the full
BEGIN and END lines and all dashes) and paste it in the appropriate location.
When contacting an external signing authority such as Verisign, ask for an SSL signing request for
an Apache modssl-based web server. A 40-bit certificate is all that is required.
Note:
Chained or Intermediate certificates are not supported. For example, if you obtain a
certificate from Verisign, purchase the Secure Site certificate, not the Secure Site Pro certificate,
which is not supported by the 700wl Series system.
Step 5.
Click Done to close this window.
Note:
The CSR is generated based on a private key. If the private key is lost or regenerated, certificates
based on this CSR will become invalid. After generating the CSR, save the private key on your local
system. The private key used to generate the CSR will then be recoverable after a factory reset or
hardware swap. See “Save and Restore Private Key” on page 6-36.
Loading the SSL Certificate
When you receive your certificate from the CA, you can either copy the certificate information and paste
it into the field provided, or you can place the certificate in a file and upload the file. Do not edit, add line
breaks, or otherwise change any of the characters in the certificate, as this will corrupt the certificate.
Step 1. Go to the Access Control Server’s Local Network page and click on the SSL tab.
Step 2. Click Load Certificates.
The Upload Certificate page appears, as shown in Figure 6-18, in a separate browser window.