Users Guide

62 Setup and Administration
X.509 Certificate Management
Web certificates are necessary to ensure the identity of a remote system and
ensure that information exchanged with the remote system cannot be viewed
or changed by others. To ensure system security, it is strongly recommended
that you either generate a new X.509 certificate, reuse an existing
X.509 certificate, or import a root certificate or certificate chain from a
Certification Authority (CA).
NOTE: You must be logged in with Administrator privileges to perform certificate
management.
You can manage X.509 certificates for Server Administrator and IT Assistant
from the respective Preferences Web page. Click General Settings, select the
Web Server tab, and click X.509 Certificate. Use the X.509 certificate tool to
either generate a new X.509 certificate, reuse an existing X.509 certificate, or
import a root certificate or certificate chain from a CA. Authorized CAs
include Verisign, Entrust, and Thawte.
Best Practices for X.509 Certificate Management
To ensure that the security of your system is not compromised while using
server administrator, you should keep in mind the following:
• Unique host name : All systems that have server administrator installed
should have unique host names.
•
Change 'localhost' to unique : All systems with host name set to 'localhost'
should be changed to a unique host name.