HP Client Bridge M111 manual Certificate stores, 802.1X Manage TLS client certificates

Page 69

Working with the M111

Managing certificates

802.1X — Manage TLS client certificates

The Certificate field shows the contents of the CN field in the certificate. This is the domain name of the certificate.

Select View to see the contents of the certificate.

802.1X — Trusted CA certificates

The M111 uses the CA certificates to validate the certificates supplied by peers during the authentication process. Multiple CA certificates can be installed to support validation of peers with certificates issued by different CAs.

Certificate file

Enter the name of the certificate file or select Browse and select it. CA certificates must be in X.509 or PKCS #7 format.

Install

Select this button to install the certificate.

802.1X — Manage CA certificates

Use this box to manage the root CA certificate.

Certificate

This box shows the list of installed certificates.

Remove

Select a certificate in the list and select this button to remove it.

View

Select a certificate in the list and select this button to view it.

Certificate stores

The certificate stores provide a repository for managing all non-802.1X certificates. To view the certificate store, select Security > Certificate stores.

3-39

Image 69

Contents ProCurve 5400zl Switches HP ProCurve M111 Client Bridge Page HP ProCurve M111 Client Bridge Publication Number Contents Working with the M111 Field descriptions To assign a management address Regulatory information Resetting to factory defaultsViii Introduction Products covered About this guideImportant terms ConventionsExample Description Commands and program listingsIntroducing the M111 Client Bridge Key featuresSafety information Professional Installation RequiredServicing HP ProCurve Networking support Online documentationBefore contacting support Getting started Scenario 1 Connecting wired devices to a wireless network Deploying the M111Overview Configure your computer Configuration procedureConnect to the M111 Select Network DNS PasswordsConfigure a station profile Connect the wired computers to the M111  The printer is configured with a static IP address Configure MAC cloning options Connect the wired device to the M111 Scenario 3 Connecting a serial device to a wireless network Configure the serial connection Getting started Getting started Working with the M111 802.1X certificates Certificate stores Certificate usage About passwords Management toolStarting the management tool Manager and Operator accounts Customizing management tool settingsPasswords Security Security policiesIP address configuration Web serverAuto-refresh To configure IP addressing Wireless range Radio configurationTo configure the radio Wireless modeRestrict channels to Fast roaming threshold Fast roaming delta threshold Antenna selectionFast scan channel delay Scan channel delayFast roaming threshold count Minimum SNR thresholdAdvanced wireless settings Using station profiles to establish a wireless linkTransmit power control RTS thresholdWorking with the M111 General To add or edit a station profileWireless protection Wireless securityKey source EAP methodWorking with the M111 Viewing APs in the neighborhood Quality of serviceEncryption type Ap1certificate or ap2certificateConfiguring Quality of Service QoS Access categoryField descriptions QoS settings in a station profile Priority mechanisms802.1p Very-high, high, normal, low priority Differentiated Services DiffServCreating IP QoS profiles DisabledTo define an IP QoS profile Upstream DiffServ taggingSettings Connecting serial devicesProfile name Protocol Start port/ End portTo connect a serial device Serial port connectorIdle timeout Transmit timeoutMode Remote IP addressData bits Drop wireless link when port 1 is connectedParity bit Stop bitsConnection time DNS configurationTx kbytes Rx kbytesDynamically assigned DNS servers DNS switch on server failureOverride dynamically assigned DNS servers ServerEnable the Redirect unsupported traffic to option DNS switch overHandling unsupported traffic To forward unsupported trafficCloning the address of a wired device IP forwardingLimitations Enabling Ethernet MAC cloning Wireless access to the M111 when MAC cloning is activeManagement tool TCP port Setting up management traffic interceptionSnmp agent UDP port Select Management SnmpEnable the Wireless traffic filters option Using filters to restrict wireless trafficSnmp notifications UDP port Remote log UDP portTo assign a management address Assigning a management addressSnmp Attributes V1/v2c communities V3 users Notification receivers Managing certificatesPassword 802.1X Install TLS client certificateInstall 802.1X certificates802.1X Manage TLS client certificates Certificate stores802.1X Trusted CA certificates 802.1X Manage CA certificatesInstalling a new CA certificate Trusted CA certificate storeCA certificate import formats END Certificate Certificate and private key storeDefault installed private key/public key certificate chains Specify the Pkcs #12 passwordCertificate usage About certificate warnings Changing the certificate assigned to a serviceConfiguration file management Manual configuration file managementBackup configuration Reset configuration Restore configurationScheduled operations Software updates Performing a scheduled update Performing an immediate software updateSelect Install Enable Scheduled installWorking with the M111 Regulatory information Manufacturers FCC Declaration of Conformity Statement Countries of Operation & Conditions of Use GHz Operation Operation Using 5 GHz Channels in the European Community5470 Supported External AntennasIndoor or outdoor use 1000 124, 128, 132, 136 Antenna Band GHzDGT LPD Low Power Device Statement Resetting to factory defaults Using the Reset button Using the management toolHow it works Page Technology for better business outcomes