12

MANAGING CERTIFICATES

 

 

A digital certificate is a form of electronic identification for computers.

 

This chapter describes processing and managing certificates, and

 

distributing PKS #12 files.

 

 

Overview

A digital certificate is a form of electronic identification for computers.

 

The 3Com Mobility System supports the following types of X.509 digital

 

certificates:

 

„ Administrative certificate for the monitoring service or a WX switch

 

„ 802.1X-EAP certificate for a WX switch

 

„ WebAAA certificate for a WX switch

 

„ Certificate authority certificate to validate the administrator’s certificate

 

„ Certificate authority certificate to validate user and the EAP server

 

certificates

 

When 3WXM connects to 3WXM Services or a WX switch, the

 

administrative certificate is used to authenticate the service or WX switch

 

and establish a secure connection.

 

If a WX switch does not already have certificates, MSS automatically generates

 

them the first time you boot using MSS Version 4.2 or later. You do not need

 

to install certificates unless you want to replace the ones automatically

 

generated by MSS. (For more information, see the “Certificates Automatically

 

Generated by MSS” section in the “Managing Keys and Certificates” chapter of

 

the Wireless LAN Switch and Controller Configuration Guide.)

 

Before installing a new certificate, verify that the WX switch is set to the

 

correct date, time, and time zone. Otherwise, certificates might not be

 

installed correctly.

 

For more information about certificates on the WX, see the Wireless LAN

 

Switch and Controller Configuration Guide.

Page 369
Image 369
3Com 3CRWXR10095A, 3CRWX120695A WXR100 Distributing PKS #12 files, Certificates, „ 802.1X-EAP certificate for a WX switch