Huawei LUNA2000-100KTL-M1 - D Certificate Management and Maintenance

D Certicate Management and
Maintenance
Precongured Certicate Risk Disclaimer
The Huawei-issued certicates precongured on Huawei devices during
manufacturing are mandatory identity credentials for Huawei devices. The
disclaimer statements for using the
certicates are as follows:
1. Precongured Huawei-issued certicates are used only in the deployment
phase, for establishing initial security channels between devices and the
customer's network. Huawei does not promise or guarantee the security of
precongured certicates.
2. The customer shall bear consequences of all security risks and security
incidents arising from using precongured Huawei-issued certicates as
service
certicates.
3. A precongured Huawei-issued certicate is valid from the manufacturing
date until October 2041.
4. Services using a
precongured Huawei-issued certicate will be interrupted
when the certicate expires.
5. It is recommended that customers deploy a PKI system to issue
certicates for
devices and software on the live network and manage the lifecycle of the
certicates. To ensure security, certicates with short validity periods are
recommended.
Application Scenarios of Precongured Certicates
File Path and Name
Application Scenario Replacement
f:/ca.crt (Root certicate) When the PCS
communicates with the
SACU through Modbus-
TCP, the certicate two-
way authentication is
performed.
For details about how to
replace a certicate,
contact technical support
engineers to obtain the
corresponding security
maintenance manual.
f:/tomcat_client.crt
(Local Certicate)
f:/tomcat_client.key
(Private key le)
LUNA2000-100KTL-M1 Smart Power Control System
User Manual D Certicate Management and Maintenance
Issue 02 (2023-01-10) Copyright © Huawei Technologies Co., Ltd. 105