Specifications

Explorers Nur für den internen Gebrauch
A31003-H3580-M103-2-76A9, 01-2009
7-86 HiPath 3000/5000 V8 - HG 1500 V8, Administrator Documentation
hg-07.fm
Security
Optional parameters:
Example
create ssl certificate root 1
"C=EN,O=Siemens,OU=Test,CN=192.168.101.24"
2003/01/01/00:00:00 2003/02/01/00:00:00
Once the command is entered, the fingerprint of the certificate that has just been generat-
ed is displayed. Make a note of this hexadecimal numeral.
You can output the fingerprint of the certificate currently active with the show finger-
print CLI command. Please note that if you create and activate multiple certificates one
after the other with CLI, the fingerprint output only ever refers to the last certificate activat-
ed.
The certificate is automatically stored once you have entered "create SSL certifi-
cate...".
If, however, you performed other changes that were not saved, you can use the save
configuration CLI command to back up the current configuration.
4. Activate enable ssl to force an explicit restart.
5. Open MS Internet Explorer with an Administration PC connected via LAN and call up the
board via the WBM address field. The entry must begin with https and must contain the
IP address of the board. You can specify the port number 443 afterwards (optional).
Example with optional port specification:
https://192.168.10.104:443
MS Internet Explorer displays the following security warning: You are about to view pages
over a secure connection. .... .
<sig.alg> Signature algorithm type in the format MD5_WITH_RSA or
SHA1_WITH_RSA
<pub.key alg> Type of public key algorithm in the format RSA.
<pub.key len> Public key length in the format 768, 1024, 1536 or 2048.
<alt.name> alternative subject name or IP address in the format
"C=<country>,O=<organization>, OU=<use>, CN=<na-
me>" where <country> is specified with two characters,
for example, EN or num.num.num.num for an IP address
<CRL distr. point> CRL distribution point, specify URL
>
This fingerprint is important for checking the generated certificate at a later time.
Only an unmodified certificate shows exactly the same fingerprint.