APC AP7900 manual 136

Switched Rack PDU

USER’S GUIDE

®

–A server certificate signed by a custom CA root certificate also created with the APC Security Wizard. Use this method if your company or agency does not have its own Certificate Authority and you do not want to use an external Certificate Authority to sign the server certificate.

–A server certificate signed by an external Certificate Authority. This Certificate Authority can be one that is managed by your own company or agency or can be one of the commercial Certificate Authorities whose CA root certificates are distributed as part of a browser’s software.

•A certificate signing request containing all the information required for a server certificate except the digital signature. You need this request if you are using an external Certificate Authority.

•A CA root certificate.

•An SSH host key that your SSH client program uses to authenticate the Rack PDU when you log on to the control console interface.

All public keys for SSL certificates and all host keys for SSH that are created with the APC Security Wizard are 1024-bit RSA keys. If you do not create and use SSL server

certificates and SSH host keys with the APC Security Wizard, the Rack PDU generates 768-bit RSA keys.

Only APC server management and key management products can use server certificates, host keys, and CA root certificates created by the APC Security Wizard. These files will not work with products such as OpenSSL® and Microsoft IIS.

136