User's Manual

Wireless Array
226 Configuring the Wireless Array
8. HTTPS (X.509) Certificate
,
a. Import Xirrus Authority into Browser: This feature imports the
Xirrus Certificate Authority (CA) into your browser (for a discussion,
please see “Certificates and Connecting Securely to the WMI” on
page 212). Click the link (xirrus-ca.crt), and then click Open to view
or install the current Xirrus CA certificate. Click Install Certificate to
start your browser’s Certificate Install Wizard. We recommend that
you use this process to install Xirrus as a root authority in your
browser.
When you assign a Host Name to your Array using the Express
Setup window, then the next time you reboot the Array it
automatically creates a security certificate for that host name. That
certificate uses Xirrus as the signing authority. Thus, in order to avoid
having certificate errors on your browser when using WMI:
• You must have assigned a host name to the Array and rebooted at
some time after that.
• Use Import Xirrus Authority into Browser

ArrayOS releases 6.5 and above only support 2048-bit certificates, while
previous releases only support 1024-bit certificates. The Array saves data
related to previous 1024-bit and current 2048-bit certificates separately, thus
ArrayOS can be upgraded or downgraded without losing any of this data.
When ArrayOS is upgraded to 6.5, a new self-signed certificate will be
automatically generated.
If you have imported a previous (pre-Release 6.5 version) Xirrus CA-signed
certificate into your browser, the trusted Xirrus CA needs to be updated.
Delete the current Xirrus CA in the browser. Upgrade the Array to release
6.5 or above and then download the new xirrus-ca.crt file and import it into
the browser as a trusted CA, as explained below.
Similarly, if you are using a certificate signed by an external CA, you will
need to update and replace that certificate on the Array.