Planet Technology IKVM-1000 Switch User Manual


 
45
5.5.4 Certificate
The IKVM-1000 uses the Secure Socket Layer (SSL) protocol for any encrypted
network traffic between itself and a connected client. During the connection
establishment the IKVM-1000 has to expose its identity to a client using a
cryptographic certificate. Upon delivery, this certificate and the underlying secret
key is the same for all IKVM-1000 ever produced and certainly will not match the
network configuration that will be applied to the IKVM-1000 by its user. The
certificate's underlying secret key is also used for securing the SSL handshake.
Hence, this is a security risk (but far better than no encryption at all).
However, it is possible to generate and install a new certificate that is unique for a
particular IKVM-1000. In order to do that, the IKVM-1000 is able to generate a new
cryptographic key and the associated Certificate Signing Request (CSR) that
needs to be certified by a certification authority (CA). A certification authority
verifies that you are the person who you claim you are, and signs and issues a SSL
certificate to you.
The following steps are necessary to create and install a SSL certificate for the
IKVM-1000:
Create a SSL Certificate Signing Request using the panel shown in Certificate
page. You need to fill out a number of fields that are explained below. Once this is
done, click on the button Create which will initiate the Certificate Signing