Raritan Computer KSX II Switch User Manual


 
Chapter 7: User Management
126
13. Select the Enable Secure LDAP checkbox if you would like to use
SSL. This will enable the Enable LDAPS Server Certificate Validation
checkbox. Secure Sockets Layer (SSL) is a cryptographic protocol
that allows KSX II to communicate securely with the LDAP/LDAPS
server.
14. The default Port is 389. Either use the standard LDAP TCP port or
specify another port.
15. The default Secure LDAP Port is 636. Either use the default port or
specify another port. This field is only used when the Enable Secure
LDAP checkbox is selected.
16. Select the Enable LDAPS Server Certificate Validation checkbox to
use the previously uploaded root CA certificate file to validate the
certificate provided by the server. If you do not want to use the
previously uploaded root CA certificate file, leave this checkbox
deselected. Disabling this function is the equivalent of accepting a
certificate that has been signed by an unknown certifying authority.
This checkbox is only available when the Enable Secure LDAP
checkbox has been enabled.
Note: When the Enable LDAPS Server Certificate Validation option is
selected, in addition to using the Root CA certificate for validation,
the server hostname must match the common name provided in the
server certificate.
17. If needed, upload the Root CA Certificate File. This field is enabled
when the Enable Secure LDAP option is selected. Consult your
authentication server administrator to get the CA certificate file in
Base64 encoded X-509 format for the LDAP/LDAPS server. Use the
Browse button to navigate to the certificate file. If you are replacing a
certificate for the LDAP/LDAPS server with a new certificate, you
must reboot the KSX II in order for the new certificate to take effect.
Test LDAP Server Access