Manuals / AMX / Computer Equipment / Network Card

AMX NXC-ME260 What to do when a Certificate Expires, a new certificate from your current CA

Models: NXC-ME260

1 106

Download 106 pages 58.54 Kb

Page 78

NetLinx Security and Web Server

2.Click on the Download Java Web Start > Download Java Web Start 1.4.2 link to begin the download of the application to your hard drive and follow the installation procedures recommended by the application.

3.Restart your computer and launch your browser.

4.Repeat steps 1 - 5 from the previous section to launch the WebControl tab associated with your Master.

5.Click on the G3 panel name link associated with the target panel.

6.A secondary web browser window appears on the screen to notify you that the computer is Loading the Java Virtual Machine.

What to do when a Certificate Expires

Self-generated certificates have a duration period of approximately 30 years. Most externally requested CA certificates are generally valid for a period of approximately 1 - 5 years.

The only way to avoid a CA certificate becoming invalid due to a time expiration is to request

a new certificate from your current CA.

Refer to the Creating a Request for a SSL Server Certificate section on page 63 for more

information on how to request an externally generated certificate.

	72	NetLinx Integrated Controllers

Image 78

AMX NXC-ME260 instruction manual What to do when a Certificate Expires, a new certificate from your current CA

Contents

NetLinx Master-Ethernet Card/Module NXC-ME260instruction manual NetLinx Central Controllers and CardsAMX Limited Warranty and Disclaimer Table of Contents Installation and WiringProduct Information Communication and Firmware Update NetLinx Security and Web ServerNetLinx Security with a Terminal Connection Programming Product Information Front and rear panel componentsSpecifications NXC-ME260 SpecificationsProduct Information Rear panel LEDs Ethernet NXC-ME260 Specifications ContRear panel LEDs ICSNet/ICSHub Product InformationProduct Information NXC-ME260 NetLinx Master-Ethernet Card/ModuleBaud rate settings Installation and WiringSetting the Program Port DIP Switch Baud Rate SettingsSetting the Program Port DIP switch Preparing captive wires Wiring GuidelinesModes and Front Panel LED Blink Patterns Modes and LED Blink PatternsWiring a 2-pin power connection Wiring length guidelinesWiring Length Guidelines @ 750 mA Using the 4-pin mini-Phoenix connector for data and powerProgram Port Connections and Wiring Using the 4-pin mini-Phoenix connector for data with external power5-Pin Program Port Pinouts and Signals ICSNet RJ-45 Connections/WiringRS232 Program Port, Pinouts, and Signals ICSNet RJ-45 SignalsRJ-45 Pinout Information EIA/TIA 568 B ICSHub RJ-45 Connections/WiringICSHub IN Pinouts and Signals ICSHub IN portEthernet RJ-45 Pinouts and Signals Ethernet 10/100 Base-T RJ-45 Connections/WiringICSHub OUT Pinouts and Signals ICSHub OUT portSPE Port Connection/Wiring Ethernet ports used by the ME260Ethernet Ports Used by the ME260 SPE Connector Pinouts and Signals Installation and WiringSPE cable pinout information NXC-ME260 Installation and Mounting Procedures Mounting the ME260 into an NXS-NMSMounting the NXS-NMS Into an Equipment Rack Mounting the NXC-ME260 in an NXF CardFrame or NXI Replacing the Lithium Batteries Battery CR2032 type - 20mm coin cell socketFIG. 15 Lithium battery and socket Installation and Wiring NXC-ME260 NetLinx Master-Ethernet Card/ModuleCommunication and Firmware Update Communicating with the Master via the Program PortBefore beginning Verifying the current version of NetLinx Master firmware Setting the System Value Select Diagnostics Device Addressing from the Main menuWorking with multiple NetLinx Masters Changing the system value on the Modero panel4. Press the System Connection button Device Address original device value Check-Off to verify change Changing the Device Address on a Netlinx DeviceSelect Diagnostics Device Addressing from the Main menu FIG. 19 Device Addressing dialog changing the device valuethere is a problem, use a system value of zero 0 on the Master Changing the device address on the Modero panelRecommended NetLinx Device numbers Resetting the Factory Default System and Device Values Obtaining the Master’s IP Address using DHCPSelect Diagnostics Device Addressing from the Main menu 8. Click OK to accept the new changes Assigning a Static IP to the NetLinx Master 1. Select Diagnostics Network Addresses from the Main menuCommunicating with the NetLinx Master via an IP FIG. 22 Assigning Communication Settings and TCP/IP SettingsInstalling New NetLinx Master Firmware via an IP Communication and Firmware UpdateNXC-ME260 NetLinx Master-Ethernet Card/Module 7. Select the Master’s KIT file from the Files section FIG 13. Click Close once the download process is complete Communication and Firmware Update NXC-ME260 NetLinx Master-Ethernet Card/ModuleNetLinx Security and Web Server NetLinx Security web browser and feature supportSupported Browser and Feature Compatibility Master Security Telnet Security Terminal RS232 Program port security New Master Firmware Security FeaturesNetLinx Security Terms HTTP Web Server Security FTP SecurityNetLinx Security Terms Cont Accessing the NetLinx Master via an IP AddressWebControl Tab greater than 139. The ME260 cannot use firmware greater thenDefault Security Configuration Default Security ConfigurationWebControl Tab Features Security Options FTP Security - EnabledSecurity Tab Security Tab FeaturesSecurity link is selected Security System Features Security Tab Features ContSecurity tab - Enable Security page This field will not be enabled until after the initialSecurity System Features Cont Security tab - Add Group pageAdd Group Entries Add Group Entries Cont Security tab - Modify Group pageModify Group Entries Modify Group Entries Cont Security tab - Group Directory Associations pageDirectory Association has been assigned to the account Here are some examples of valid entriesValid Directory Association Entries Group Directory Association EntriesNetLinx Security and Web Server Security tab - Add User pageAdd User Entries NetLinx Integrated ControllersSecurity tab - Modify User page Modify User EntriesModify User Entries Cont Security tab - User Directory Associations pageValid Directory Association Entries User Directory Association EntriesSecurity tab - SSL Server Certificate page Server Certificate EntriesServer Certificate Entries Cont certificate because the Master Key has been changedFIG. 34 Security Tab - Export Certificate Request field Security tab - Export Certificate Request pageSecurity tab - Import Certificate page FIG. 35 Security Tab - Import Certificate fieldSystem Tab Show Devices TabNetwork Tab Master Security Setup Procedures FIG. 38 Security tab - showing NetLinx Master security optionsAdding a Group and assigning their access rights The administrator group account cannot be deleted or modifiedModifying an existing Group’s access rights FIG. 40 Security tab - showing the Modify Group access rights fieldsShowing a list of authorized Groups Deleting an existing GroupAdding a Group directory association Valid Directory Association Entries2. Click the Directory Associations link The administrator user account cannot be deleted or modifiedConfirming the new directory association Deleting a directory associationAdding a User and configuring their access rights NetLinx cannot be used since they already existModifying an existing User’s access rights Showing a list of authorized Users Deleting a UserAdding a User directory association 2. Click the Directory Associations link SSL Certificate ProceduresConfirming the new directory association Deleting a directory associationself-generating a certificate Self-Generating a SSL Server Certificate RequestThis domain name does not need to be resolvable URL Address when The city/province name must be fully spelled outCreating a Request for a SSL Server Certificate The state/province name must be fully spelled outImporting a CA certificate to the Master over a secure SSL connection Before importing a CA server certificate, you mustDisplay SSL Server Certificate Information Regenerating an SSL Server Certificate RequestCommon Steps for Requesting a Certificate from a CA 7. Before exiting the Master and beginning another session4. Enter the name of the server being used this is the Master Accessing an SSL-Enabled Master via an IP Address 7. Click Next to proceed with the certificate store process Using your NetLinx Master to control the G4 panel Using your NetLinx Master to control the G3 panel The ME260 cannot use firmware greater thenWhat to do when a Certificate Expires a new certificate from your current CANetLinx Security with a Terminal Connection NetLinx Security FeaturesInitial Setup via a Terminal Connection NetLinx Security FeaturesAccessing the Security configuration options Stop bits1, and Flow control None default is HardwareIf NetLinx Master security is not enabled, you will see the following Security Options Menu Option 2 - Display system security options for NetLinx MasterOption 3 - Add user Option 4 - Edit User Edit User MenuAccess Rights Menu Edit User MenuNetLinx Security with a Terminal Connection Option 6 - Show the list of authorized users Access Rights MenuOption 5 - Delete user Option 7 - Add GroupEdit Group Menu Edit Group Menu Add directory associationEdit Group menu Change Access Rights Edit Group menu Delete directory associationEdit Group menu List directory associations Edit Group menu Display Access Rights Option 8 - Edit GroupOption 9 - Delete Group Option 10 - Show List of Authorized Groups Option 11 - Set Telnet Timeout in secondsOption 12 - Display Telnet Timeout in seconds Option 13 - Make changes permanent by saving to flashMain Security Menu Main Security MenuNetLinx Security with a Terminal Connection Default Security Configuration Main Security Menu Contwere added. This is a permanent change and you will be Help menu Help Menu OptionsNetLinx Security with a Terminal Connection Logging Into a Session Help Menu Options ContLogout Setup SecurityHelp Security PC COM Port Communication Settings Program Port CommandsProgramming Program Port CommandsTIME Program Port Commands ContSET DATE SET TIMEGET IP DPS Program Port Commands ContDISK FREE MSG ON or MSG OFFPASS DPS Program Port Commands ContREBOOT DPS PING IP ADDRESSSENDCOMMAND DPS Program Port Commands ContROUTE MODE DIRECTNORMALSHOW COMBINE Program Port Commands ContSET URL DPS SHOW DEVICE DPSSHOW NOTIFY Program Port Commands ContSHOW LOG ProgrammingSHOW ROUTE Program Port Commands ContSHOW REMOTE SHOW SYSTEMESC Pass Codes ESC Pass CodesProgram Port Commands Cont TCP LISTNotes on Specific Telnet/Terminal Clients Windows client programsLinux Telnet client Programming NXC-ME260 NetLinx Master-Ethernet Card/ModuleRevisionLast04/05/04