The BMC web application is available via TLS-secured (https) access either directly through port 443 or indirectly through port 80 to 443. ACL rules are not applicable to prevent unsecured (http) access. A sample X.509 certificate which is a copy of the BMC, and EMA certificates are shipped along with the SBC shipment. The size of this certificate is 2,048 bits.
...
The BMC also provides the interface which uploads the self-signed certificate to replace the sample X.509 certificates.
Info | ||||
---|---|---|---|---|
| ||||
The SBC is delivered with sample self-signed X-509 certificates. Please be aware that even though these sample certificates allows you to use HTTPS to access the SBC from BMC, or EMA interfaces, using this protocol with the sample certificates is not a truly secure access method. If your organization requires a more secure access, refer to Generating PKI Certificates. |
...
The following procedure describes how to upload self signed certificates using BMC:
Login Log on to the SBC BMC using the IP address configured in the previous section.
Username: root
Password: superuser
The SBC BMC main screen appears.
Caption | ||||
---|---|---|---|---|
| ||||
Navigate to Configuration > SSL.
Caption | ||||
---|---|---|---|---|
| ||||
The SSL Certificate Configuration window is displayed. By default, the Upload SSL tab is displayed.
Caption | ||||
---|---|---|---|---|
| ||||
From the Open dialog, browse to and select the BMC certificate and click Open. The selected file is ready to be uploaded.
Caption | ||||
---|---|---|---|---|
| ||||
Click Upload to upload the new BMC Certificate and BMC Privacy key.
Caption | ||||
---|---|---|---|---|
| ||||
A message appears to replace the existing certificate with the new SSL certificate. This will restart the HTTPs service.
Click OK to continue.
Caption | ||||
---|---|---|---|---|
| ||||
Once the certificates are successfully uploaded and the old certificates are replaced with the new SSL certificate, the following message appears:
Caption | ||||
---|---|---|---|---|
| ||||
...