Additional section:
In this section:
Unable to show "metadata-from": No such page "_space_variables"
is enhanced to interface with the common certificate pool. The certificates used for HTTPS will be exported from the database to the local disk space. A new EMA TLS profile is added to enable the selection of a certificate from the pool. The All Perspective is enhanced to allow importing of new certificates. EMA provides a tool to support certificate upload. The Certificate Upload tool is a new action item under PKI object (System > Security > PKI). Once this action item is selected, an external window is directed to the Certificate Upload Servlet. Two types of files, p12 and pem, are supported.SBC supports SHA-256 for certificate verification.
The user may configure up to three client CA certifications (using separate 'set' commands) for an EMA TLS Profile.
PC Java Configuration supports TLS 1.0 only by default. When EmaTlsProfile v1_0 is disabled, the corresponding Java Configuration for TLS support must be enabled. See below example for Windows environment:
To enable TLS support in Windows:
- Click Start and enter "Java Control Panel" in the Search field.
- Launch the Java Control Panel program.
- From the Java Control Panel, select Advanced tab.
- Check both "Use TLS 1.1" and "Use TLS 1.2" options under Advanced Security Settings section, and click Apply.
- Restart your browser for the changes to take effect.
To View Ema Tls Profile
On SBC main screen, go to Configuration > System Provisioning > Security Configuration > Ema Tls Profile. The Ema Tls Profile window is displayed.
Security Configuration - Ema Tls Profile
To Edit Ema Tls Profile
To edit any of the Ema Tls Profile in the list, click the radio button next to the specific Ema Tls Profile name.
Security Configuration - Ema Tls Profile Highlighted
The Edit Selected Ema Tls Profile window is displayed below.
Security Configuration - Ema Tls Profile Edit Window
Make the required changes and click Save at the right hand bottom of the panel to save the changes made.
To Create Ema Tls Profile
To create a new Ema Tls Profile, click New Ema Tls Profile tab on the Ema Tls Profile List panel.
Security Configuration - Ema Tls Profile Fields
The Create New Ema Tls Profile window is displayed.
You can create only one Ema Tls Profile. Once the entry is created, the button disappears from the panel.
Security Configuration - Ema Tls Profile Create Window
The following fields are displayed:
Ema Tls Profile Parameters
| Parameter | Description |
|---|---|
Name | Specifies the name of the EMA-TLS profile. |
Auth Client | If this field is set to true, the Ema-TLS client is forced to authenticate itself EMA-TLS. If this field is set
|
Server Cert Name | Specifies the name of the server certificate referred by this EMA-TLS profile. |
Ocsp Profile Name | Specifies the name of the OCSP profile referred by this TLS profile. |
V1_0 | TLS protocol version 1.0.
|
V1_1 | TLS protocol version 1.1.
|
V1_2 | TLS protocol version 1.2.
|
To Delete Ema Tls Profile
To delete any of the created Ema Tls Profile, click the radio button next to the specific Ema Tls Profile which you want to delete.
Security Configuration - Ema Tls Profile Highlighted
Click Delete at the end of the highlighted row. A delete confirmation message appears seeking your decision.
Security Configuration - Ema Tls Profile Delete Confirmation
Click OK to remove the specific Ema Tls Profile from the list.
Overview
Content Tools