Nortel Networks NN42030-300 manual Appendix B Self-signed certiﬁcate generation

Page 59

.

59

Appendix B

Self-signed certiﬁcate generation

As an alternative to using a Certificate Authority, you can generate and use self-signed certificates.

ATTENTION

Self-signed certificates do not provide the same level of security as CA-signed certificates. Use self-signed certificates for test or demonstration purposes only.

For more information about the Java keytool, go to http://java.sun.com/ an d search on the keyword keytool.

Procedure 23

Generating self-signed certiﬁcates

Step Action

1Log on to the server as nortel.

2To become the superuser, enter the following command: su

3Change to the certificate keystore directory: cd /opt/SQMobilityGW/

4Delete the default keystore: rm .keystore

5Generate a self-signed certificate keystore and certificate:

/usr/java/jdk1.5.0_03/bin/keytool -genkey

-alias Tomcat -keyalg RSA -storepass firsthand -keypass firsthand -dname ’cn=<common name>’ -keystore .keystore -validity xxx

where

xxxrepresents the number of days until the certificate expires. The default value is

Nortel Mobile Communication 3100 Series Portfolio

Nortel Mobile Communication Gateway 3100 Installation and Upgrades

NN42030-300 02.03 Standard

9 May 2008

Copyright © 2007, 2008 Nortel Networks

Image 59

Contents NN42030-300 Legal Notice Contents System software maintenance Copyright 2007, 2008 Nortel Networks Copyright 2007, 2008 Nortel Networks Other changes FeaturesNew in this release Revision history How to get help Getting help through a Nortel distributor or reseller Intended audience IntroductionSubject ConventionsText conventions cont’d Related informationTerminology NTPs Introduction MCG 3100 server components FundamentalsOverview Software components Hardware requirements SpecificationHardware components Installation overview Installation optionsOverview of the MC 3100 installation Fundamentals Linux base installation PreinstallationEnterprise network veriﬁcation PreinstallationSupported Ldap servers Preinstallation Redundant server option InstallationNonredundant and redundant server implementations Nonredundant server optionRules for redundant server implementations Software installationProcedure Installing the MCG 3100 software Appinstall End MCG 3100 Web Console logon PostinstallationProcedure Logging on to the MCG 3100 Web Console MCG 3100 parameter conﬁguration Procedure Conﬁguring the MCG 3100 parametersMCG 3100 configuration parameter fields Field Description Postinstallation License ﬁle Procedure Adding a license ﬁleError Licence ﬁle troubleshootingEnroll with a Certificate Authority Manage TLS certiﬁcatesCertificate Signing Request generation Procedure Generating a CSR To generate the CSR, enter Firsthand Procedure Obtaining a signed TLS certificateSigned TLS certificate CA root and intermediate certificates Procedure Obtaining a CA root or intermediate certificateUsr/java/jdk1.5.003/bin/keytool -import Root and signed certificate installationProcedure Installing the root and signed certiﬁcates Change the keystore default password Viewing the contents of the keystoreCd /opt/SQmobilityGW/tomcat/conf Sudo /sbin/service mobilitygw restartCA root certificate distribution Click File Manager Procedure Installing a root certificate on a Nokia deviceManage TLS certificates Postinstallation Procedure Upgrading the MCG 3100 system software from CD System software maintenanceSystem software upgrades System software maintenance PM EST Sudo /opt/mobilitybase-2.1-XX/postpatch.sh Procedure Removing an SUSudo /opt/mobilitybase-2.1-XX/postunpatch.sh System software uninstallationProcedure Uninstalling the MCG 3100 system software Admin shell accessShell commands Sudo /sbin/service mobilityadmin stop Sudo /sbin/service mobilitygw startSudo /sbin/service mobilitygw stop Sudo /sbin/service mobilityadmin startRoot 9498 9367 0 1402 pts/0 000000 grep SQMobilityGW Procedure Checking the Gateway Server processesProcedure Checking the Administration Server processes Root 9542 9367 0 1404 pts/0 000000 grep SQMobilityAdminProcedure Restoring the databases Mysqldump --opt --all-databases backup.sqlProcedure Backing up the databases To start the server processes, enter System software maintenance Port usage page 57 lists the port usage details for MCG Appendix a Port numbers and protocolsTCP JVM Usr/java/jdk1.5.003/bin/keytool -genkey Procedure Generating self-signed certiﬁcatesAppendix B Self-signed certiﬁcate generation Days. Nortel recommends using a value 3650 Index Copyright 2007, 2008 Nortel Networks Page Nortel Mobile Communication 3100 Series Portfolio