Star Micronics IFBD-HE07 - Self-signed Certificates; CA-signed Certificates

IFBD-HE0708 BE07 User’s Manual
5-2
5.2.1. Self-signedCerticates
CreatingandsigningaservercerticateonthewebsettingsscreenoftheNICprinterunit.Youcanregisterthecerticateeasily
because you are not required to install an application.
Theinputitemsonthe“Self-SignedCerticate”screenofthewebsettingsareshowninthefollowingtable.
Inputitemswhencreatingacerticate
Variable name Max length of string [Example] Default value
Country Name (2 letter code) 2 JP (Blank)
State or Province Name 128 Shizuoka city (Blank)
Locally Name (eg, city) 128 Shimizu-ku, Nanatshushinya (Blank)
Organization Name (eg, company) 128 Star Micronics Co., ltd. (Blank)
Organization Unit Name (eg, section) 128 Software Section (Blank)
Domain (IP Address) 128 192.168.1.175 (Blank)
Expiration Date (eg, YYYY/MM/DD)
2015.01.01 ～ 2049.12.31
2020/12/31 (Blank)
• Toregisteracerticateinthewebbrowser,click[CreateSelf-SignedCerticate]andthenclick[Download].
• Youcandeleteacerticatelebyclicking[Delete]afterclicking[CreateSelf-SignedCerticate].Todeleteaself-signed
certicate,youneedtodisableSSL/TLSbeforehand.
• Entertheexpirationdateofthecerticateinthe"ExpirationDate"eld.Youcanspecifyanexpirationdateupto"2064.12.31".
However, the web browser will misinterpret the expiration date as 1950 or later, and cause an error when specifying a date from
2050orlater.Consequentlythemaximumdateisxedat"2049.12.31".
Thevalidperiodstartdateisxedat“2015.01.01”withF/WVer.4.0.0.WithF/WVer.4.1.0orlaterandVer.5.0.0orlater,thestart
date is the date of creation.
Inaddition,theminimumdatefortheexpirationdateisxedat"2015.01.01".
• Oncethecerticatehasbeenregistered,itcannotbedeletedbyinitializingNIC.Todeletethecerticate,click[CreateSelf-
SignedCerticate]andthenclick[Delete]ontheSSL/TLSsettingsscreen.
• Theminimumrequireditemsforcreatingacerticatearethe"Domain"and"ExpirationDate",butwerecommendyouinput
information for all items.
• With F/W Ver. 4.1.0 and Ver. 5.0.0 or later, the Subject Alt Name (SAN) item is generated based on the value input for Domain
(IP Address).
Anexampleprocedureforcreatingandsigningaself-signedcerticateisdescribedin"7.1Exampleproceduresforregistrationof
SSLcerticate"inappendix2.
5.2.2. CA-signedCerticates
YoucanimportaservercerticatecreatedexternallyandsignedbyCA(CerticationAuthority)andaprivatekeytotheprinterNIC.
<Servercerticatespecication>
 •Encodingtype:Base64(lenameextension=PEM)
 •Typesofthecerticationle:PKCS#1
• Key length (F/W Ver.4.X.X or earlier): RSA 1024bit (Cannot upgrade to F/W Ver.5.0.0 or later.)
• Key length (F/W Ver.5.0.0 and later): RSA 2048bit or 1024bit (I/F card bearing “M” mark on PCB chassis.)
• TheCAaboveisrequiredtoregisterasa"TrustedRootCerticationAuthorities"inthewebbrowser.
• YoucandeletethecerticateregisteredtotheNICbyclicking[Delete]afterselecting[ImportCA-SignedCerticate].However,
the[Delete]buttonisdisabledunlessaCA-signedcerticateandaCA-signedprivatekeyareregistered.
• Oncethecerticatehasbeenregistered,itcannotbedeletedbyinitializingtheNIC.Todeletethecerticate,click[ImportCA-
SignedCerticate]andthenclick[Delete]ontheSSL/TLSsettingsscreen.
AnexampleprocedureforimportingaCA-signedcerticatetoNICisindicatedin"7.1ExampleproceduresforregistrationofSSL
certicate"inappendix2.