151
7.3 Configuring Encryption Settings
Encrypting using IPsec
Communication with this machine can be encrypted using IPsec.
A device certificate signed by a certificate authority (CA) is required when [IKE Authentication Method] is
[Authenticate by Digital Signature].
A device certificate is not required when [IKE Authentication Method] is [Authenticate by Preshared Key].
In addition, to verify communication-partner devices, a certificate (root certificate authority certificate) issued by
another certificate authority of the partner must be imported into the machine.
Configuring HTTP Communication Encryption Settings
Preparing a certificate
Prepare a certificate to encrypt HTTP communication. Either generate a self-signed certificate (for an SSL server) or
import a certificate signed by a certificate authority (CA).
Note
ļ¬
When the same certificate has already been registered to a category of either [Device Certificate] or [Other Certificates],
importation is not possible. Delete the registered certificate before importing.
Creating a self-signed certificate (for an SSL server)
1. Launch CentreWare Internet Services, and then log in as a machine administrator.
Refer
ļ¬
For details, refer to "Starting CentreWare Internet Services" (P.147).
2. From the left-side menu, click [System].
3. Click [Security].
4. Click [Certificate Settings].
5. Click [Create] > [Generate Self-Signed Certificate].
6. Configure[Digital Signature Algorithm] if necessary.
7. Configure [Public Key Size] if necessary.
8. Configure [Issued By] if necessary.
9. Configure [Validity Period] if necessary.
10. Click [Start].
11. After generation is complete, click [Close].
To import a certificate signed by a certificate authority (CA) into the machine
Before importing a certificate signed by a certificate authority (CA) into the machine, generate a self-signed
certificate, and then configure the settings to encrypt HTTP communication.
1. Launch CentreWare Internet Services, and then log in as a machine administrator.
Refer
ļ¬
For details, refer to ā"Starting CentreWare Internet Services" (P.147)ā.