Installation Instructions

Table Of Contents
© ip.access Ltd
COMPANY CONFIDENTIAL CENG0336_XE_nanoBTS_Installation_and_Test_Manual.doc
- 74 -
6.5.5.11 Security
The Security button allows the user to view certain attributes of the nanoBTS relating
to whether and how the nanoBTS uses secure SSL connections, and allows the
downloading of certificates and certificate revocation lists to the nanoBTS.
When the button is pressed, BTS Installer fetches some attributes from the nanoBTS
and then displays this dialog:
The Security Possible attribute is a read-only attribute which indicates whether the
nanoBTS is capable of making secure connections. If the nanoBTS is not capable of
making secure connections because it is running a version of software which does not
have this feature then “(not present)” will be displayed. If the nanoBTS does have
security capable software running then the value will be one of:
No certificate – no certificate has been downloaded to the nanoBTS and it is
unable to make secure connections.
Certificate available – a certificate has been downloaded to the nanoBTS, but
the nanoBTS has not been resent since the download of the certificate. The
nanoBTS is unable to make secure connections but should become able to
make secure connections if it is reset.
Certificate in use – a certificate has been downloaded to the nanoBTS and is
in use. The nanoBTS is able to make secure connections.
The SSL Control attribute is a configurable attribute which instructs the nanoBTS how
it is allowed to make connections. This attribute cannot be configured from BTS
Installer; ways to configure it include using Config Manager. If the nanoBTS is running
a version of software which is capable of making secure connections the value
displayed will be one of:
Security Disabled – the nanoBTS will not make secure connections
Security Optional – the nanoBTS will make secure (SSL) connections if
possible, or insecure connections if secure connections cannot be made
Security Mandatory – the nanoBTS will only make secure (SSL) connections;
if it cannot make secure connections it will refuse to make insecure
connections.