C H A P T E R 3 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide

NOTE: There must be no white space before, between, or after certificates, and the “Begin...” headers and “End...” trailers must all be retained.

A global site certificate is validated by an accompanying intermediate CA certificate. (Such pairs are called “chained certificates.”) Examples of intermediate CA certificates include Microsoft SGC Root§, and VeriSign Class 3§ CA. When a requesting browser receives a global site certificate along with an intermediate CA certificate, the browser’s root certificate is used to validate the intermediate CA certificate, which in turn is used to validate the global site certificate, thus letting the browser know that it can renegotiate the connection to use 128-bit encryption.

Global Site Certificate Paste Procedure

If you wish to use a global site certificate, you must import both the global site certificate and its accompanying intermediate CA certificate. Both certificates must be chained together in a single file.

Use the import cert command to import either single or chained certificates. In the latter case, paste the server’s global site certificate first, followed by the intermediate CA certificate. Follow the intermediate CA certificate by typing three periods on a new line.

Example:

Intel 7115> import cert <keyID>

Import protocol: (paste, xmodem, uudecode) [paste]:

Type or paste in data, end with ... alone on line

-----BEGIN CERTIFICATE-----

MIIFZTCCBM6gAwIBAgIQCTN2wvQH2CK+rgZKcTrNBzANBgkq

hkiG9w0BAQQFADCBujEfMB0GA1UEChMWVmVyaVNpZ24gVHJ1

c3QgTmV0d29yazEXMBUGA1UECxMOVmVyaVNpZ24sIEluYy4x

MzAxBgNVBAsTKlZlcmlTaWduIEludGVybmF0aW9uYWwgU2Vy

:

dmVyIENBIC0gQ2xhc3MgMzFJMEcGA1UECxNAd3d3LnZlcmlz

aWduLmNvbS9DUFMg

SW5jb3JwLmJ5IFJlZi4gTElBQklMSVRZIExURC4oYyk5NyBW

ZXJpU2lnbjAeFw05

OTExMTEwMDAwMDBaFw0wMDExMTAyMzU5NTlaMIHHMQswCQYD VQQGEwJVUzETMBEG

-----END CERTIFICATE-----

-----BEGIN CERTIFICATE-----

MIIEMTCCA5qgAwIBAgIQI2yXHivGDQv5dGDe8QjDwzANBgkq

hkiG9w0BAQIFADBfMQswCQYDVQQGEwJVUzEXMBUGA1UEChMO

VmVyaVNpZ24sIEluYy4xNzA1BgNVBAsTLkNsYXNzIDMgUHVi

bGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkw

HhcNOTcwNDE3MDAwMDAwWhcN

3-16

Page 38
Image 38
Intel A31032-001 manual Global Site Certificate Paste Procedure, Example, Intel 7115 import cert keyID