5-3
Security
Secure Connection
You can also download the encryption parameter files that provide algorithms for encrypting the key
exchanges.
To manage HTTP parameters and certificates, you use both the Secure Connection page and the Update
Manager page.
To display the Secure Connection page, click Security > Secure Connection in the navigation pane.
Figure 5-2. Secure Connection Page
Table 5-2. Secure Connection Fields
■ If the value of the Certificate Present? field is True, you can click Delete to delete the existing
certificate.
■ If you click Download Certificates, the Update Manager page will be displayed to enable you to
download a certificate file to the switch. See “Downloading SSL Certificates and Diffie-Hellman
Files” on page 5-4.
■ If you click Generate Certificates, the switch creates its own self-signed public key certificate.
See “Generating Certificates” on page 5-5.
■ If you enable or disable HTTPS Admin Mode, or change the timeout settings, click Apply to
save the changes for the current boot session; the changes take effect immediately.
Note Download or regenerate a certificate when the previous certificate has expired, or when you have
reason to suspect that security has been breached and the certificate has been taken for use by another
server.
Field Description
HTTP Admin Mode Enable the Administrative mode of HTTP. This mode can only be disabled when the
HTTPS Admin mode is enabled.
HTTPS Admin Mode Enable secure HTTPS sessions. (Verify that the Certificate Present field is set to True.)
You can only download SSL certificates when this mode is disabled.
Session Soft Timeout The number of minutes after which an HTTPS session times-out if there is no user
activity.
Session Hard Timeout The number of minutes after which an HTTPS session times-out, regardless of recent
user activity.
Certificate Present?
True — A certificate is available for use with HTTPS sessions.
False—No certificate is available on the switch.
Certificate Generation Status Indicates that a certificate is being generated or that no certificate generation is in
progress.
To Next Page
Loading...
Need help?
General
