Digi ConnectPort X4 User's Guide Page 232

  • Download
  • Add to my manuals
  • Print
  • Page
    / 271
  • Table of contents
  • TROUBLESHOOTING
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 231
Administration from the web interface
232
X.509 Certificate/Key Management
The X.509 Certificate/Key Management pages are for loading and managing entries in a
database of certificate and private key data.This feature supports displaying, loading, saving,
removing, certificate database entries, and importing a private key for the Digi device into the
database. Certificates and public/private host key pairs are an integral part of public key
infrastructure (PKI) based security.
Supported security implementations
The X.509 Certificate/Key Management feature manages several kinds of certificate databases and
security implementations, including X.509 Certificate Authority/Certificate Revocation, Simple
Certificate Enrollment Protocol (SCEP), Virtual Private Networking (VPN), Secure Sockets Layer
(SSL)/Transport Layer Security (TLS), and Secure Shell (SSHv2).
In X.509 Certificate Authority/Certificate Revocation, a trusted third party issues digital
certificates for use by other parties.
SCEP is used for obtaining certificates used in Virtual Private Networking (VPN)
security. It is primarily used by large enterprises, and allows for provisioning from the
field.
VPN uses the IPSec protocol to securely connect a device to a network, connect two
networks together, and allow a device to perform proxy VPN.
SSL and TLS security are mainly used to secure access to web pages for configuration
purposes, secure serial port connections, and SSL autoconnect, an automatic connection
(autoconnection) between a serial port on the device and a remote network destination.
Secure Shell (SSHv2) is mainly used to secure access to a device’s console and serial
ports for configuration purposes.
Benefits of using certificates
Some benefits of using certificates to manage security include:
Certificates are more secure than Digi self-signed certificates.
Certificate management allows you to push your own certificates out to Digi devices.
More flexibility in key sizes.
Managing certificates through the web interface creates a repository of certificates that
can be used by other applications and processes.
Additional information on certificate management
Implementing certificate management requires selecting a security type and understanding its
technical details and key operations. If you are tasked with certificate management for your
organization and need more background information, a good place to start is Wikipedia articles for
the security types (X.509 CA/CRL, SCEP, VPN, SSL/TLS), and SSH). These articles reference
resources such as standards, Request For Comments pages (RFCs), and articles that provide more
technical detail.
Page view 231
1 2 ... 227 228 229 230 231 232 233 234 235 236 237 ... 270 271

Comments to this Manuals

No comments