User manual

Security
TPG User Manual 55
5.3 How to Use Certificates Correctly
The TPG has its own certificate management. This section explains
how certificates are used and when the use of certificates is
recommended.
What are
Certificates?
Certificates can be used in TCP/IP-based networks to encrypt data
and to authenticate communication partners. Certificates are
electronic messages containing a key (public key) and a signature.
Benefits and
Purpose
The use of certificates allows for various security mechanisms. Use
certificates on your TPG
• to receive encrypted print data; see:
Ö50.
• to check the identity of the TPG in the network; see:
’Configuring EAP-TLS’ Ö63.
• to authenticate the TPG/client if the administrative web access
to the TPG Control Center is protected via HTTPS (SSL/TLS); see:
Ö52.
If you want to use certificates, it is advisable to protect the
administrative web access to the TPG Control Center by a password
so that the certificate on the TPG cannot be deleted by
unauthorized persons; see: Ö52.
Which Certificates
are available?
Both self-signed certificates and CA certificates can be used with
the TPG. The following certificates can be distinguished:
• Self-signed certificates have a digital signature that has been
created by the TPG. If a self-signed certificate is used, the
ThinPrint server cannot print via SSL/TLS. A CA certificate is
mandatory to print via SSL.
• CA certificates are certificates that have been signed by a
certification authority (CA).
• The authenticity of the CA certificate can be verified by means
of a so-called root certificate issued by the certification