User`s guide

Administering Security Certificates for HTTPS and SSH on the OnSite
520
AlterPath OnSite Administrator’s and User’s Guide
Administering Security Certificates for HTTPS
and SSH on the OnSite
Configuration of security certificates is required to support the security
features in the following list:
• HTTPS (secure HTTP based on SSL)
Because HTTPS requires an SSL certificate to be installed in the web
server, the OnSite automatically generates and installs its own self-signed
certificate. The OnSite administrator needs to replace the automatically-
generated self-signed certificate.
• SSH authentication through exchange of SSH certificates
OpenSSH software included in the OnSite supports optional
authentication of SSH connections through exchange of X.509
certificates. The OnSite administrator needs to configure support for
exchange of X.509 certificates requires configuration
The following table lists the procedures included in this document for
administering security certificates. See also publicly available OpenSSL and
OpenSSH documentation for additional details.
Table 8-3: Tasks for Administering Security Certificates
Task Where Documented
Replace the automatically-generated
certificate in the Web server with a new
certificate generated with your
organization’s identification.
“Configuring Security Certificates” on page
521
Note: The replacement for the
automatically-generated certificate is
usually used as a placeholder while an
official CA-signed certificate is being
obtained.