Nokia IP45 Security Platform User’s Guide v4.0
207
±
Internal Network + VPN
—to enable users of your internal network and users connected
to your IP45 through a VPN tunnel to access your IP45 through HTTPS.
±
IP Address Range
—to give a range of IP addresses. Traffic from these IP addresses only
can access your IP45 through HTTPS.
±
ANY—
to enable traffic generated from any IP address to access your IP45 through
HTTPS.
4.
Click Apply when you finish making the settings.
The Saved Successfully message appears.
Generating a Self-Signed Certificate and Private Key by Using the
CLI
Use the following command to generate a certificate and its associated private key. To better
ensure your security, generate the certificate and private key over a trusted connection.
generate https ssl-certificate key-bits <512 | 768 | 1024> <passphrase
name
| prompt-passphrase> country
name
state-or-province
name
locality
name
organization
name
organizational-unit
name
common-name
name
e-mail
address
name
<cert-file path | cert-request-file path> key-file path
For more information, see the
Nokia
IP45 Security Platform CLI Reference Guide Version 4.0
.
Installing a Certificate and Private Key
Use the following commands to copy a certificate and its associated private key in the /var/etc/
https_ssl_cert_server.crt and /var/etc/https_ssl_server.key files. Copying the certificate and
private key to these files makes them available to establish SSL-secure Web connections.
set https ssl-certificate
cert-file path key-file path <passphrase name | prompt-
passphrase>
For more information, see the
Nokia IP45 Security Platform CLI Reference Guide Version 4.0.
Viewing Certificate Fingerprint Display
The Nokia IP45 v4.0 supports certificate fingerprint display, a unique text used to identify the
certificate. This fingerprint will match the fingerprint displayed in the SecuRemote VPN clients,
upon connection to the appliance.
If the administrator provides a fingerprint to a SecuRemote user, the user should verify that the
root CA fingerprint that is displayed matches with the one provided by the administrator.You can
view the certificate fingerprint information by using the IP45 GUI.
To view a certificate fingerprint, choose VPN from the main menu and select Certificate.
The VPN certificate information is displayed with the fingerprint text, as shown below:
19216811.live