Оценок - 3, средний балл: 4.3
(
)
)
|
Фрагмент инструкции
Click the Stop Server button. To disable HTTP access, ensure that the SMI-A server is running. Click the Start Server button. 5. Click Apply. Brocade SMI Agent User’s Guide 53-1001778-01 SMI Agent security FIGURE 11 HTTP access Importing client certificates If you enable mutual authentication for clients or mutual authentication for indications, you can import a client certificate into the SMI Agent server truststore. This certificate will be used for authentication if mutual authentication is enabled. NOTE You can import only certificates generated using Java Keytool or OpenSSL. If mutual authentication is enabled and if you do not provide a security certificate, then the Brocade-provided client certificate (client.cer) will be used to authenticate clients. You must have Administrator privileges (Windows) or root/admin privileges (Linux, Solaris, and AIX) to import client certificates. This option is disabled if you do not have the appropriate privilege. 1. Launch the Brocade SMI Agent Configuration Tool. 2. Click Import in the menu tree (see Figure 12). Brocade SMI Agent User’s Guide 53-1001778-01 3 SMI Agent security FIGURE 12 Importing client certificates 3. Enter information for the client certificate to be used for mutual authentication for clients. a. Type the path of the client certificate in the Certificate File Name field, or click Select File to browse for the file. b. Type the alias name of the certificate in the Alias Name field. 4. Enter information for the client certificate to be used for mutual authentication for indications. 5. Click Apply. The changes take effect when you restart the server. Click Start Server to restart the server. Exporting server certificates If you enable mutual authentication for clients or mutual authentication for indications, you can export the corresponding SMI-A server certificate to a file so the client can add the certificate to its TrustStore. This certificate will be used for authentication if mutual authentication is enabled. If mutual authentication is enabled and if you do not export the SMI Agent server certificate, then the client keystore, truststore, and server certificates will be used for authentication. You must have Administrator privileges (Windows) or root/admin privileges (Linux, Solaris, and AIX) to export server certificates. This option is disabled if you do not have the appropriate privilege. 1. Launch the Brocade SMI Agent Configuration Tool. 2. Click Export in the menu tree (see Figure 13). Brocade SMI Agent User’s Guide 53-1001778-01 SMI Agent security FIGURE 13 Exporting client certificates 3. Enter the output folder and file name for the certificate used for mutual authentication for clients. a. Type the path of the output folder to which the server certificate will be exported in the Output Folder field, or click Select File to browse for the file. b. Type the file name in the Output File Name field. 4. Enter the output folder and file name for the certificate used for mutual authentication for indications. 5. Click Apply. The changes take effect when you restart the server. Click Start Server to restart the server. Viewing or deleting client certificates from SMI-A server truststore You can use the Brocade SMI Agent Configuration Tool to view and delete client certificates that have been added to the SMI-A server truststore. You must have Administrator privileges (Windows) or root/admin privileges (Linux, Solaris, and AIX) to view or delete client certificates. This option is disabled if you do not have the appropriate privilege. 1. Launch the Brocade SMI Agent Configuration Tool. 2. Click View/Delete in the menu tree (see Figure 14). Brocade SMI Agent User’s Guide 53-1001778-01 3 SMI Agent security FIGURE 14 Viewing and deleting client certificates in server truststore 3. Click Client Authentication or Indication Authentication to view the corresponding list of certificates. 4. Select the certificate in the left side of the pane. The right side of the pane displays the selected certificate. Use the scroll bars to view the certificate. 5. To delete the selected certificate from the SMI-A truststore, click Delete, and click Yes in the confirmation window. The changes take effect when you restart the server. Click Start Server to restart the server. Configuring user authentication You must have Administrator privileges (Windows) or root/admin privileges (Unix) to configure user authentication. This option is disabled if you do not have the appropriate privilege. The SMI-A server should be running while enabling or disabling Windows Domain Authentication. Enabling and disabling Windows Domain Authentication is applicable only for the Windows platform. 1. Launch the Brocade SMI Agent Configuration Tool. 2. Click User Authentication in the menu tree (see Figure 15 on page 29). The content pane displays the current setting, which is selected and dimmed. 3. To change the user authentication setting, click the button of the available option....