You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 9 Next »

 

The BMC web application is available via TLS-secured (https) access either directly through port 443 or indirectly through port 80 to 443. ACL rules are not applicable to prevent unsecured (http) access. A sample X.509 certificate which is a copy of the BMC, and EMA certificates are shipped along with the SBC shipment. The size of this certificate is 2,048 bits.

The BMC uses the common local certificate store of the SBC (used also for SIP/TLS) rather than having its own separate certificate store. Certificate with RSA keys up to 4,096 bits are supported. However, Sonus recommends using 2,048 bit certificates.

Enter the following URL in the browser to access the SBC BMC GUI:

https://<BMC_IP_Address> 

where BMC IP address is the IP address of the BMC GUI.

The BMC also provides the interface which uploads the self-signed certificate to replace the sample X.509 certificates.

Note

The

Unable to show "metadata-from": No such page "_space_variables"
is delivered with sample self-signed X-509 certificates. Please be aware that even though these sample certificates will allow you to use HTTPS to access the
Unable to show "metadata-from": No such page "_space_variables"
from the BMC or EMA interfaces, using this protocol with the sample certificates is not a truly secure access method. If your organization requires a more secure access, refer to Generating PKI Certificates. 

 


Note

The SBC supports a maximum of 4,096 TLS certificates/CAs (both local and remote).

The SBC allows importing of a single certificate in a single file only. If a CA provides a .p12 or a .pfx certificate bundle with multiple CA certificates in it, extract the certificates from the bundle, store them in separate files, and import them separately.

Use the following procedure to upload self signed certificates using BMC:

  1. Log on to the

    Unable to show "metadata-from": No such page "_space_variables"
     BMC using the IP address configured in the previous section.
    The
    Unable to show "metadata-from": No such page "_space_variables"
     BMC main screen appears.

    BMC Main Screen

     

  2. Click Configuration > SSL. The SSL Certification Configuration screen is displayed.

    SSL Upload Screen

  3. Click Browse from the Upload SSL tab, and then from the Open dialog, browse to and select the BMC certificate.

    Note

    Perform the same to select the SSL key. 

    If you require the BMC to send a certificate chain of SSL certificates instead of its own server certificate only, you must import the intermediate CA and/or root CA certificates together with the SBC server certificate in one file. The file must contain all certificates in .pem format.

    Selecting BMC Certificate

  4. Click Open. The selected SSL Certificate and the Privacy Key appears in the tab.

  5. Click Upload to upload the new BMC certificate and the Privacy Key (if any).

    Uploading SSL Certificates

  6. Follow steps 4 through 6 to upload the Default Privacy Key. A pop up message appears stating that the HTTPs Service need to restart and seeking your permission to proceed.

    Successful Upload Message

  7. Click OK to restart the BMC web server to use the new SSL Certificate.

 

Continue to Changing the BMC Password.

  • No labels