Dell 8.1 manual Certificate Management

Page 38

Auto Negotiate — Allows connection from browser with any encryption strength. The browser auto negotiates with the Server Administrator Web Server and uses the highest available encryption level for the session. Legacy browsers with weaker encryption can also connect to the Server Administrator.

128-bit or Higher — Allows connections from browsers with 128-bit or higher encryption strength. One of the following cipher suites is applicable based on the browser for any established sessions:

SSL_RSA_WITH_RC4_128_SHA

SSL_RSA_WITH_RC4_128_MD5

SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA

TLS_DHE_RSA_WITH_AES_128_CBC_SHA

SSL_RSA_WITH_3DES_EDE_CBC_SHA

TLS_RSA_WITH_AES_128_CBC_SHA

TLS_DHE_DSS_WITH_AES_128_CBC_SHA

SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA

NOTE: The 128-bit or Higher option does not allow connections from browsers with lower SSL encryption strength, such as 40 bit and 56 bit.

NOTE: If the encryption level is set to 128-bit or Higher, you can access or modify the Server Administrator settings using a browser with the same or higher encryption levels.

Key Signing Algorithm (For Self Signed Certificate) — Allows you to select a supported signing algorithm. If you select either SHA 512 or SHA 256, ensure that your operating system/browser supports this algorithm. If you select one of these options without the requisite operating system/ browser support, Server Administrator displays a cannot display the webpage error. This field is meant only for Server Administrator auto-generated self-signed certificates. The drop- down list is grayed out if you import or generate new certificates into Server Administrator.

The Java Runtime Environment — Allows you to select the one of the following options:

Bundled JRE — Enables use of the JRE provided along with the System Administrator.

System JRE — Enables use of the JRE installed on the system. Select the required version from the drop-down list.

NOTE: If the JRE does not exist on the system on which Server Administrator is running, the JRE provided with the Server Administrator is used.

4.When you finish setting options in the Server Preferences window, click Apply.

NOTE: You must restart the Server Administrator web server for the changes to take effect.

X.509 Certificate Management

NOTE: You must be logged in with Administrator privileges to perform certificate management.

Web certificates are necessary to ensure the identity of a remote system and ensure that information exchanged with the remote system are not viewed or changed by others. To ensure system security, it is recommended that:

38

Image 38
Contents Dell OpenManage Server Administrator Version Users Guide Page Contents Server Administrator Services Working With Remote Access ControllerTroubleshooting Server Administrator LogsSetting Alert Actions Frequently Asked QuestionsInstallation Updating Individual System Components IntroductionRemote Access Controller Storage Management ServiceInstrumentation Service What Is New In This ReleasePage Systems Management Standards Availability Availability On Supported Operating SystemsServer Administrator Home Other Documents You May NeedAccessing documents from Dell Support Site Obtaining Technical Assistance Contacting DellUser Privileges Setup And AdministrationRole-Based Access Control VMware ESXi Server 5.X Authentication AuthenticationMicrosoft Windows Authentication Adding Users To a Domain On Windows Operating Systems EncryptionAssigning User Privileges Creating Users With Power User Privileges Creating Users With User PrivilegesBest Practices While Using The Omarolemap File Tab = \t tab characterConfiguring The Snmp Agent Changing the Snmp community name Page Snmp Agent Access Control Configuration Server Administrator Snmp Agent Install ActionsSever Administrator Snmp Install Actions Enabling Snmp Access From Remote HostsFind the line that reads rocommunity public Page Firewall Configuration Logging In And Out Using Server AdministratorServer Administrator Local System Login Central Web Server Login Using The Active Directory Login Single Sign-OnEnabling The Use Of Client-Side Scripts On Internet Explorer Enabling The Use Of Client-Side Scripts On Mozilla Firefox Sample Server Administrator Home Page Non-Modular System Page Action Window Global Navigation BarSystem Tree Data AreaSystem/Server Module Component Status Indicators Task ButtonsGauge Indicators Using The Online HelpUsing The Preferences Home Underlined ItemsManaged System Preferences Server Administrator Web Server PreferencesSetting User And System Preferences Secure Port System Certificate Management SSL Server Certificates Server Administrator Web Server Action Tabs Upgrading web serverUsing The Server Administrator Command Line Interface Server Administrator Services Managing Your SystemServer Administrator Home Page System Tree Objects Managing System/Server Module Tree ObjectsSystem/Server Module Properties Accessing And Using Chassis Management ControllerModular Enclosure Shutdown LogsAlert Management Session ManagementMain System Chassis/Main System Main System Chassis/Main System PropertiesBatteries Bios Fans Intrusion FirmwareHardware Performance Memory Network PortsPower Management Power Supplies ProcessorsRemote Access Slots TemperaturesRemovable Flash Media Voltages Storage SoftwareOperating System Server Administrator Managing Preferences Home Page Configuration OptionsGeneral Settings Working With Remote Access Controller Viewing Basic Information Configuring The Remote Access Device To Use a LAN Connection Vlan ID Page Additional Configuration For iDRAC Configuring Remote Access Device UsersSetting Platform Event Filter Alerts Setting Platform Event Alert Destinations Page Log Window Task Buttons Server Administrator LogsIntegrated Features Maintaining The Hardware Log Server Administrator LogsHardware Log Command Log Alert LogSetting Alert Actions Example 1 ps -ef /tmp/psout.txt 2&1Setting Alert Actions In Microsoft Windows Server Server Setting Alert Action Execute Application In Windows ServerBMC/iDRAC Platform Events Filter Alert Messages Page Login Failure Scenarios TroubleshootingConnection Service Failure Server Administrator Services REINSTALLMODE=vamusDsmsadatamgr Page Frequently Asked Questions ITA communicating with Linux systemsITA communicating with Windows systems