Installation manual

3-79
SIGNAMAX LLC • www.signamax.eu
• Private Password
– Password stored in the private key file. This password is used to
verify authorization for certificate use, and is verified when downloading the certificate
to the switch.
Web – Click Security, HTTPS Settings. Fill in the TFTP server, certificate and private file
name details, then click Copy Certificate.
Figure 3-47 HTTPS Settings
CLI – This example copies the certificate file from the designated TFTP server.
Note:
The switch must be reset for the new certificate to be activated. To reset the switch, See
“Resetting the System” on page 3-33 or type:
Console#reload
Configuring the Secure Shell
The Berkeley-standard includes remote access tools originally designed for Unix
systems. Some of these tools have also been implemented for Microsoft Windows and
other environments. These tools, including commands such as rlogin (remote login), rsh
(remote shell), and rcp (remote copy), are not secure from hostile attacks.
The Secure Shell (SSH) includes server/client applications intended as a secure
replacement for the older Berkeley remote access tools. SSH can also provide remote
management access to this switch as a secure replacement for Telnet. When the client
contacts the switch via the SSH protocol, the switch generates a public-key that the client
uses along with a local user name and password for access authentication. SSH also
encrypts all data transfers passing between the switch and SSH-enabled management
station clients, and ensures that data traveling over the network arrives unaltered.
Console#copy tftp https-certificate 4-36
TFTP server ip address: <server ip-address>
Source certificate file name: <certificate file name>
Source private file name: <private key file name>
Private password: <password for private key>