Specifications

RoamAbout Mobility System Software Configuration Guide 16-1
16
Managing Keys and Certificates
Adigitalcertificateisaformofelectronicidentificationforcomputers.TheRoamAboutswitch
requiresdigitalcertificatestoauthenticateitscommunicationstoRoamAboutSwitchManager
andWebView,toWebAAAclients,andtoExtensibleAuthenticationProtocol(EAP)clientsfor
whichtheRoamAboutswitchperformsallEAPprocessing.Certificatescanbegenerated
onthe
RoamAboutswitchorobtainedfromacertificateauthority(CA).Keyscontainedwithinthe
certificatesallowtheRoamAboutswitch,itsservers,anditswirelessclientstoexchange
informationsecuredbyencryption.
Why Use Keys and Certificates?
CertainRoamAboutswitchoperationsrequiretheuseofpublic‐privatekeypairsanddigital
certificates.AllRoamAboutSwitchManagerandWebViewusers,and usersforwhichthe
RoamAboutswitchperformsIEEE 802.1XEAPauthenticationorWebAAA,requirepublic‐private
keypairsanddigitalcertificatestobeinstalledontheRoamAboutswitch.

Thesekeysandcertificatesarefundamentaltosecuringwireless,wiredauthentication,and
administrativeconnectionsbecausetheysupportWi‐FiProtectedAccess(WPA)encryptionand
dynamicWired‐EquivalencyPrivacy(WEP)encryption.
For information about... Refer to page...
Why Use Keys and Certificates? 16-1
About Keys and Certificates 16-2
Creating Keys and Certificates 16-5
Displaying Certificate and Key Information 16-11
Key and Certificate Configuration Scenarios 16-11
Notes:
• If the switch does not already have certificates, MSS automatically generates the missing ones
the first time you boot using MSS Version 4.2 or later. You do not need to install certificates unless
you want to replace the ones automatically generated by MSS. (For more information, see
“Certificates Automatically Generated by MSS” on page 16-5.)
• Before installing a new certificate, verify with the show timedate and show timezone commands
that the RoamAbout switch switch is set to the correct date, time, and time zone. Otherwise,
certificates might not be installed correctly.