Administrator Console
59
• Selected Channels - Select a subset of channels on which to operate (from the list of supported
channels). This option appears only if the chosen region of operation supports this.
• Please confirm - Check the I understand check box to confirm your understanding that the choices
are in compliance with local regulatory requirements.
• Set Properties - Click to apply the changes. Select Commit/Discard on page 88 to save the changes
to the reader.
Certificates
You can protect network services on the reader using SSL/TLS to secure the communication channel
against eavesdropping or tampering, and optionally authenticate peer networked nodes involved in the
communication. SSL/TLS protocol uses Public Key Infrastructure digital certificates. The following
services on the reader support SSL/TLS:
• Web Administrator Console service (HTTPS). See Network Services Settings on page 79.
• File Transfer Service (FTPS - explicit SSL/TLS over FTP). See Network Services Settings on page
79.
• Shell Service (SSH - by default always in secure mode).
• Secure LLRP Service (refer to the EPC Global LLRP Standard, Security in TCP Transport). See the
Enable Secure Mode option in Configure LLRP Settings on page 76.
Certificate Configuration
The Certificate Configuration page is available under the Configure Reader menu when the Administrator
Console is in HTTPS mode only. To enable HTTPS mode, select Communication > Services, and on the
Reader Communication Parameters page select HTTPS from the Web Server drop-down menu.
NOTE: The supported version of SSL/TLS varies between services. Different services support SSL v3
and TLS 1.0 and above.
NOTE: The Validate Peer option in Secure LLRP Service configuration enables authentication of reader
and/or clients using digital certificates. You must import a custom certificate (instead of the default
self-signed certificate) to the reader to enable this option. See Configure LLRP Settings on page 76 for
details. Services other than Secure LLRP rely on password-based authentication.
NOTE: The SNMP service on the reader supports SNMP v2c and does not support security.