User`s guide

43UPS Network Management Card 2 User’s Guide
Web SSL Certificate screen
Path: Configuration > Network > Web > SSL Certificate
Add, replace, or remove a security certificate. SSL (Secure Socket Layer) is a protocol used to encrypt data
between your browser and the web server.
The Status can be:
• Valid certificate: A valid certificate was installed or was generated by the NMC. Click on this link to
view the contents of the certificate.
• Certificate not installed: A certificate is not installed, or was installed by FTP or SCP to an incorrect
location. Using Add or Replace Certificate File installs the certificate to the correct location: /ssl on
the NMC.
• Generating: The NMC is generating a certificate because no valid certificate was found.
• Loading: A certificate is being activated on the NMC.
If you install an invalid certificate, or if no certificate is loaded while SSL is enabled, the NMC
generates a default certificate, a process which delays access to the interface for up to one minute.
You can use the default certificate for basic encryption-based security, but a security alert message
displays whenever you log on.
Add or Replace Certificate File: Browse to the certificate file created with the Security Wizard. See
“Creating and Installing Digital Certificates” in the Security Handbook on the Network Management Card
Utility CD to see how to use digital certificates created by the Security Wizard or generated by the NMC.
Remove: Delete the certificate. See screen text also.
Console screen
Path: Configuration > Network > Console > Access
Path: Configuration > Network > Console > SSL Host Key
Console access. You need to enable console access in order to update your UPS firmware, see “Firmware
Update screen”. Console access enables use of the command line interface (CLI).
You can enable access to the CLI through either Telnet or SSH or through both, by using the Enable check
boxes. Telnet does not encrypt user names, passwords, and data during transmission whereas SSH 2 does.
For the ports to be used to communicate with the NMC, you can change the setting to any unused port from
5000 to 32768 for additional security.
• Telnet Port: This is 23 by default. You must then use a colon (:) or a space to specify the non-default
port, as required by your Telnet client program.
For example, for port 5000 and an IP address of 152.214.12.114, your Telnet client requires one of the
these commands:
telnet 152.214.12.114:5000 or telnet 152.214.12.114 5000
• SSH Port: This is 22 by default. See the documentation for your SSH client for the command line
format required to specify a non-default port. See also “SSH Host Key” below.
SSH Host Key. If you’re using SSH (Secure Shell Protocol) for console (CLI) access, you can add, replace, or
remove the host key on the SSL Host Key screen.
Status indicates whether the host key (private key) is valid. The Status can be:
• SSH Disabled: No host key in use.