3 SMI Agent security

FIGURE 12 Importing client certificates

3.Enter information for the client certificate to be used for mutual authentication for clients.

a.Type the path of the client certificate in the Certificate File Name field, or click Select File to browse for the file.

b.Type the alias name of the certificate in the Alias Name field.

4.Enter information for the client certificate to be used for mutual authentication for indications.

5.Click Apply.

The changes take effect when you restart the server. Click Start Server to restart the server.

Exporting server certificates

If you enable mutual authentication for clients or mutual authentication for indications, you can export the corresponding SMI-A server certificate to a file so the client can add the certificate to its TrustStore. This certificate will be used for authentication if mutual authentication is enabled.

If mutual authentication is enabled and if you do not export the SMI Agent server certificate, then the client keystore, truststore, and server certificates will be used for authentication.

You must have Administrator privileges (Windows) or root/admin privileges (Linux, Solaris, and AIX) to export server certificates. This option is disabled if you do not have the appropriate privilege.

1.Launch the Brocade SMI Agent Configuration Tool.

2.Click Export in the menu tree (see Figure 13).

26

Brocade SMI Agent User’s Guide

 

53-1001778-01

Page 42
Image 42
Brocade Communications Systems 53-1001778-01 manual Exporting server certificates