HP (Hewlett-Packard) MSM7XX Switch User Manual


 
NOC authentication
Setting up the certificates
Install certificates on the Web server
Install an SSL certificate and its matching CA certificate into a folder on the Web server
hosting the remote login page. The login application and the service controller access the
certificates from this location.
The SSL certificate is used by the login application to secure communications with the
service controller.
Define attributes
Add the following attributes to the Configured attributes table on the Public access >
Attributes page. (You can also define these attributes in the RADIUS profile for the service
controller if you are using a RADIUS server.) This enables it to retrieve the SSL and CA
certificates from the Web server:
ssl-noc-certificate=URL_of_the_Certificate
Certificate issued to the application on the Web server that sends user info to the service
controller for authentication.
ssl-noc-ca-certificate=URL_of_the_certificate
Certificate of the certificate authority (CA) that issued the NOC certificate.
ssl-certificate=URL_of_the_certificate
Custom certificate installed on the service controller.
Install a certificate on service controller
Note This step is optional, but recommended.
Install an SSL certificate on the service controller to replace its default SSL certificate. This
certificate is used to secure communications between the service controller and the login
application on the Web server.
If you do not change the default certificate on the service controller, the login application
may not be able to validate the service controllers certificate when establishing the SSL
connection. The reason for this is because the default certificate is self-signed and is not
trusted by any well-known CA.
This can be done by adding an additional attribute to the Configured attributes table on the
Public access > Attributes page. (You can also define this attribute in the RADIUS profile
for the service controller if you are using a RADIUS server.).
ssl-certificate=URL_of_the_certificate
D-7