No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

X6800 Server Node iBMC (Earlier Than V250) User Guide 29

This document describes the underlying management software Intelligent Baseboard Management Controller (iBMC) of the servers.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring the iBMC SSL Certificate

Configuring the iBMC SSL Certificate

Operation Scenario

An SSL certificate sets up an SSL security channel over HTTPS between the web browser on a client and a web server so that data can be encrypted and then transmitted between the client and the server, which prevents data disclosure. SSL ensures the security of transmitted data and is used for verifying the authenticity of a website to be accessed. Huawei servers allow you to replace SSL certificates. You are advised to replace the original certificate and keys with your customized certificate and public and private key pair, and promptly update the certificate for security purposes.

This topic describes how to replace the SSL certificate.

Preparations

Prerequisites

A local client can communicate with the server iBMC.

Procedure

    Log in to the iBMC WebUI.

    For details, see Logging In to the iBMC WebUI.

    Perform operations based on actual needs:

    Customize certificate information.

    1. On the iBMC WebUI, choose Config > SSL Certificate.
    2. Click Customize.
    3. In the Step 1: Generation CSR area, set the customized certificate information.

      The customized information includes the country, province (state), city, company (organization), and department (organization unit), and common name.

    4. Click Save.
    5. In the displayed dialog box, export the CSR file to the client as prompted.

    Obtain an SSL certificate.

    You can obtain the SSL certificate in one of the following ways:
    • Apply for an SSL signature certificate from an official certificate authority. (recommended)
    • Use a certificate generation tool (such as OpenSSL) to manually generate the SSL signature certificate and root certificate.

      You can download the certificate generation tool and its manual from the Internet.

    Import the SSL certificate file.

    1. On the SSL Certificate page, click Customize.
    2. If you use an SSL certificate issued by a certificate authority, find the Step 2: Import Server Certificate area, click Browse, select the SSL signature certificate generated in Obtain an SSL certificate, and click Save.

      After the certificate is imported, the message "Succeeded in importing the certificate. Reset iBMC for the certificate to take effect." is displayed.

    3. If you use an SSL certificate manually generated, find the Custom Certificate area, click Browse, select the SSL signature certificate obtained in Obtain an SSL certificate, enter the password used by transmission in the Certificate Password text box, and click Save.

      After the certificate is imported, the message "Succeeded in importing the certificate. Reset iBMC for the certificate to take effect." is displayed.

    4. Restart iBMC.

    Add a root certificate to the client browser.

    NOTE:
    If the imported SSL certificate is manually generated (not issued by an official authority), check whether the client browser has the root certificate after the SSL certificate is imported.
    The following uses Internet Explorer as an example to describe how to view and add a root certificate in the browser.

    1. Open Internet Explorer.
    2. On the toolbar, choose Tools > Internet Options.

      The Internet Options dialog box is displayed.

    3. On the Content tab page, click Certificate.

      The Certificate dialog box is displayed.

    4. On the Trusted Root Certificate Issuer tab page, check whether the SSL certificate issuer is listed.

      • If yes, go to 14.
      • If no, go to 15.

    5. Check whether the SSL certificate has expired.

      • If yes, go to 15.
      • If no, go to 16.

    6. On the Trusted Root Certificate Issuer tab page, click Import. Import the root certificate as prompted.
    7. Open Internet Explorer again, and check whether the icon is displayed in the address bar.

      • If yes, no further action is required.
      • If no, contact Huawei technical support.

Translation
Download
Updated: 2019-02-28

Document ID: EDOC1000066341

Views: 130960

Downloads: 1079

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next