White Paper

81
Root Certificate Authority: RootCA
Subordinate Certificate Authority: R2
RootCA.example.internal
R2.example.internal
RootCA’s Certificate
RootCA’s
Public Key
RootCA’s Digital
Signature
RootCA’s Info +
R2’s Certificate
R2’s Public Key
RootCA’s Digital
Signature
R2’s Info +
LJ 4345MFP’s Identity
Certificate
Public Key
R2’s Digital
Signature
LJ 4345MFP’s Info +
What Certificates should be configured on
Jetdirect so that an SSL Client will be
successful?
RootCA’s Certificate
RootCA’s
Public Key
RootCA’s Digital
Signature
RootCA’s Info +
CORRECT!
Figure 35 - Correct HP Jetdirect CA Configuration
Be sure the Root CA of your CA Hierarchy has its public key certificate configured on Jetdirect!
Here is a question for you: When Jetdirect is acting as a client and receives the server’s certificate
signed by R2, how can it know that R2’s certificate was signed by RootCA? The answer: It cannot!
Another special thing must happen: The server must send R2’s CA certificate along with its own
certificate. This allows Jetdirect to “walk the chain” and verify the certificate chain is valid. Refer to
Figure 36 – Walking the Chain 1