WESM zl Management and Configuration Guide WT.01.28 and greater

2-165
Configuring the ProCurve Wireless Edge Services zl Module
Digital Certificates
■ CRL
This element is optional, but recommended to prevent your module from
accepting invalid certificates. Your CA should provide you with a CRL.
You must complete these tasks to configure a self-signed certificate:
1. Optionally, pre-create a specific key for the certificate. Typically, however, you
can allow the module to automatically generate a key when you create the
certificate.
2. Use the Certificates Wizard to create the certificate.
You must complete these tasks to install a server certificate signed by a CA:
1. Optionally, pre-create a specific key for the certificate. Typically, however, the
module can automatically generate a key when you create the certificate request.
2. Use the Certificates Wizard to create the certificate request.
3. Submit the certificate request to your CA.
4. The CA will send generate the server certificate and send it to you. It should also
send the CA certificate and a CRL. Load these files on an FTP server, TFTP
server, or the station that runs the Web browser interface.
5. Use the Certificates Wizard to upload the server certificate and CA certificate.
6. Use the CLI to upload the CRL.
You access the Certificates Wizard, as well as manage trustpoints, in the Management
> Certificate Management screen.