Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Panel

In this section:

Table of Contents
maxLevel2



Info
iconfalse

Related articles:

Children Display



 

The 

Spacevars
0series4
 supports interfacing with the common certificate pool. The certificates used for HTTPS are exported from the database to the local disk space. The EMA TLS profile enables the selection of a certificate from the pool. The All Perspective allows importing of new certificates. EMA provides a tool to support certificate upload. The Certificate Upload tool is available under PKI object (System > Security > PKI). Once this action item is selected, an external window is directed to the Certificate Upload Servlet. Two types of files, p12 and pem, are supported.

The

Spacevars
0product
 also supports SHA-256 for certificate verification.

Include Page
OneCertificateSupport
OneCertificateSupport

Note

The user may configure up to three client CA certifications (using separate 'set' commands) for an EMA TLS Profile.


Warning

PC Java Configuration supports TLS 1.0 only by default. When EmaTlsProfile v1_0 is disabled, the corresponding Java Configuration for TLS support must be enabled. See below example for Windows environment:

To enable TLS support in Windows:

  1. Click Start and enter "Java Control Panel" in the Search field.
  2. Launch the Java Control Panel program.
  3. From the Java Control Panel, select Advanced tab.
  4. Check both "Use TLS 1.1" and "Use TLS 1.2" options under Advanced Security Settings section, and click Apply.
  5. Restart your browser for the changes to take effect.
 


Include Page
Beast_Attack
Beast_Attack

To View Ema Tls Profile

On the

Spacevars
0series4
 main screen, go to Configuration > System Provisioning > Security Configuration > Ema Tls Profile. The Ema Tls Profile window is displayed.

Caption
0Figure
1Security Configuration - Ema Tls Profile

Image Modified

 

To Edit Ema Tls Profile

To edit any of the Ema Tls Profile in the list, click the radio button next to the specific Ema Tls Profile name.

Caption0Figure

1Security Configuration - Ema Tls Profile Highlighted

Image Modified

 

The Edit Selected Ema Tls Profile window is displayed below.

caption

0Figure
1Security Configuration - Ema Tls Profile Edit Window

Image Modified

 

Make the required changes and click Save at the right hand bottom of the panel to save the changes made.

To Create Ema Tls Profile

To create a new Ema Tls Profile, click New Ema Tls Profile tab on the Ema Tls Profile List panel.

Caption0

Figure1Security Configuration - Ema Tls Profile Fields

Image Modified

 

The Create New Ema Tls Profile window is displayed.

1
Note

You can create only one Ema Tls Profile. Once the entry is created, the  button disappears from the panel.

Caption
0Figure

Security Configuration - Ema Tls Profile Create Window


Image Modified

 

The following fields are displayed:

Caption
0Table
1Ema Tls Profile Parameters
ParameterDescription
 NameSpecifies the name of the EMA-TLS profile. 
Auth Client

If this field is set to true, the Ema-TLS client is forced to authenticate itself

EMA-TLS. If this field is set
false, the client must complete authentication within a higher level protocol once the

EMA-TLS

connection comes up

. The options are:

  • false
  • true (default)
Server Cert NameSpecifies the name of the server certificate referred by this EMA-TLS profile. 
Ocsp Profile NameSpecifies the name of the OCSP profile referred by this TLS profile. 
V1_0

TLS protocol version 1.0.

  • disabled (default)
  • enabled
V1_1

TLS protocol version 1.1.

  • disabled (default)
  • enabled
V1_2

TLS protocol version 1.2.

  • disabled
  • enabled (default)

To Delete Ema Tls Profile

To delete any of the created Ema Tls Profile, click the radio button next to the specific Ema Tls Profile which you want to delete.

Caption
0Figure
1Security Configuration - Ema Tls Profile Highlighted

Image Modified

 

Click Delete at the end of the highlighted row. A delete confirmation message appears seeking your decision.

Caption0Figure1Security Configuration - Ema Tls Profile Delete Confirmation

Image Modified

Click OK to remove the specific Ema Tls Profile from the list.pagebreak