Installation manual

3-78
SIGNAMAX LLC • www.signamax.eu
Web – Click Security, HTTPS Settings. Enable HTTPS and specify the port number, then
click Apply.
Figure 3-46 HTTPS Settings
CLI – This example enables the HTTP secure server and modifies the port number.
Replacing the Default Secure-site Certificate
When you log onto the web interface using HTTPS (for secure access), a Secure Sockets
Layer (SSL) certificate appears for the switch. By default, the certificate that Netscape
and Internet Explorer display will be associated with a warning that the site is not
recognized as a secure site. This is because the certificate has not been signed by an
approved certification authority. If you want this warning to be replaced by a message
confirming that the connection to the switch is secure, you must obtain a unique certificate
and a private key and password from a recognized certification authority.
Caution:
For maximum security, we recommend you obtain a unique Secure Sockets Layer
certificate at the earliest opportunity. This is because the default certificate for the
switch is not unique to the hardware you have purchased.
When you have obtained these, place them on your TFTP server and transfer them to the
switch to replace the default (unrecognized) certificate with an authorized one.
Command Attributes
• TFTP Server IP Address
– IP address of TFTP server which contains the certificate file.
• Source Certificate File Name
– Name of certificate file stored on the TFTP server.
• Source Private File Name
– Name of private key file stored on the TFTP server.
Console(config)#ip http secure-server 4-122
Console(config)#ip http secure-port 443 4-123
Console(config)#