You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Next »

Back to Table of Contents

Back to Installing SBC 5000 and 7000 Series Software

Back to Configuring the SBC 7000 Platform

The BMC web application is available via TLS-secured (https) access either directly through port 443 or indirectly through port 80 to 443. ACL rules are not applicable to prevent unsecured (http) access. A sample X.509 certificate which is a copy of the BMC, Platform Manager and EMA certificates are shipped along with the SBC shipment. The size of this certificate is 2,048 bits.

The BMC uses the common local certificate store of the SBC (used also for SIP/TLS) rather than having its own separate certificate store. Certificate with RSA keys up to 4,096 bits are supported. However, Sonus recommends using 2,048 bit certificates.

Enter the following URL in the browser to access the SBC BMC GUI:

https://<BMC IP Address>

where BMC IP Address is the IP address of the BMC GUI.

The BMC also provides the interface which uploads the self-signed certificate to replace the sample X.509 certificates.

The SBC is delivered with sample self-signed X-509 certificates. Please be aware that even though these sample certificates will allow you to use HTTPS to access the SBC from BMC, Platform Manager or EMA interfaces, using this protocol with the sample certificates is not a truly secure access method. If your organization requires a more secure access, refer to Generating PKI Certificates.

Note

The SBC supports a maximum of 4,096 TLS certificates/CAs (both local and remote).

The following procedure describes how to upload self signed certificates using BMC:

  1. Login to the SBC BMC using the IP address configured in the previous section.

    Username: root
    Password: superuser

    The SBC BMC main screen appears.

     

  2. Click Configuration > SSL. By default, the Upload SSL tab displays.

    SSL Upload Screen

  3. Click Choose File from the New SSL Certificate. From the Open dialog, browse to and select the BMC certificate and click Open.

    Selecting BMC Certificate

  4. Click Upload to upload the new BMC Certificate and BMC Privacy key.

    Uploading SSL Certificates

  5. A message appears to replace the existing certificate with the new SSL certificate. This will restart the HTTPs service. Click OK to continue.

    Replacing Existing SSL Certificate

  6. The certificates are successfully uploaded and replaced with the new SSL certificate. A confirmation message appears.

    Successful Upload Message

  7. Close the BMC web session and open a new browser session to reconnect to the BMC.

 

Continue to Changing the BMC Password for SBC 7000.

  • No labels