Appendix A Browser Certificates

Client Authentication Message

The X family device uses the same HTTPS channel to communicate with other products as it does to communicate with LSM. During the SSL handshake, the device asks for a client certificate for validation. This is meant for other products; however, LSM users may also be prompted for a client certificate. You can ignore this dialog.

Figure A–1: Client Authentication Dialog Box

To remove this warning, you can create and install a personal certificate on your workstation.

The following Procedures detail how to create and install the personal certificate:

•“Creating a Personal Certificate” on page 272

•“Installing the Personal Certificate” on page 272

Creating a Personal Certificate

The following command generates a self-signed certificate good for 10 years. The user must have access to a computer with OpenSSL installed on it. For the latest copy of OpenSSL, go to the OpenSSL web site: http://www.openssl.org.

STEP 1 Enter the following command:

openssl req -new -x509 -days 3650 -out cert.pem -keyout privkey.pem

This command creates two files: cert.pem and privkey.pem.

STEP 2 Enter the following command:

openssl pkcs12 -export -in cert.pem -inkey privkey.pem -out to_import.p12

This command creates the import file: to_import.p12.

Installing the Personal Certificate

The following instructions detail how to create the personal certificate. During the procedure, you will import the file called to_import.p12.

272 X Family LSM User’s Guide V 2.5.1