Nortel Networks NN42030-300 manual

60Appendix B Self-signed certificate generation

90 days. Nortel recommends using a value of

3650.

ATTENTION

Use the host name (including domain name) of the server as the common name (cn).

6Generate the client certificate:

/usr/java/jdk1.5.0_03/bin/keytool -export -alias Tomcat -file publickey.der -storepass firsthand -keypass firsthand -keystore .keystore

7Use a file management utility to move the client certificate to a location where it can be distributed to users.

8Restart the server by entering service mobilitygw restart

--End--

Nortel Mobile Communication 3100 Series Portfolio

Nortel Mobile Communication Gateway 3100 Installation and Upgrades

NN42030-300 02.03 Standard

9 May 2008

Copyright © 2007, 2008 Nortel Networks

Image 60

Nortel Networks NN42030-300 manual Days. Nortel recommends using a value 3650

Contents

NN42030-300 Legal Notice Contents System software maintenance Copyright 2007, 2008 Nortel Networks Copyright 2007, 2008 Nortel Networks Features New in this releaseOther changes Revision history How to get help Getting help through a Nortel distributor or reseller Introduction SubjectConventions Intended audience Related information TerminologyText conventions cont’d NTPs Introduction Fundamentals OverviewMCG 3100 server components Hardware requirements Specification Hardware componentsSoftware components Installation options Overview of the MC 3100 installationInstallation overview Fundamentals Preinstallation Linux base installation Preinstallation Enterprise network veriﬁcation Supported Ldap servers Preinstallation Installation Nonredundant and redundant server implementationsNonredundant server option Redundant server option Software installation Procedure Installing the MCG 3100 softwareRules for redundant server implementations Appinstall End Postinstallation Procedure Logging on to the MCG 3100 Web ConsoleMCG 3100 Web Console logon Procedure Conﬁguring the MCG 3100 parameters MCG 3100 parameter conﬁguration MCG 3100 configuration parameter fields Field Description Postinstallation Procedure Adding a license ﬁle License ﬁle Licence ﬁle troubleshooting Error Manage TLS certiﬁcates Enroll with a Certificate Authority Certificate Signing Request generation Procedure Generating a CSR To generate the CSR, enter Procedure Obtaining a signed TLS certificate Signed TLS certificateFirsthand Procedure Obtaining a CA root or intermediate certificate CA root and intermediate certificates Root and signed certificate installation Procedure Installing the root and signed certiﬁcatesUsr/java/jdk1.5.003/bin/keytool -import Viewing the contents of the keystore Change the keystore default password Sudo /sbin/service mobilitygw restart CA root certificate distributionCd /opt/SQmobilityGW/tomcat/conf Procedure Installing a root certificate on a Nokia device Click File Manager Manage TLS certificates Postinstallation System software maintenance System software upgradesProcedure Upgrading the MCG 3100 system software from CD System software maintenance PM EST Procedure Removing an SU Sudo /opt/mobilitybase-2.1-XX/postpatch.sh System software uninstallation Sudo /opt/mobilitybase-2.1-XX/postunpatch.sh Admin shell access Shell commandsProcedure Uninstalling the MCG 3100 system software Sudo /sbin/service mobilitygw start Sudo /sbin/service mobilitygw stopSudo /sbin/service mobilityadmin start Sudo /sbin/service mobilityadmin stop Procedure Checking the Gateway Server processes Root 9498 9367 0 1402 pts/0 000000 grep SQMobilityGW Root 9542 9367 0 1404 pts/0 000000 grep SQMobilityAdmin Procedure Checking the Administration Server processes Mysqldump --opt --all-databases backup.sql Procedure Backing up the databasesProcedure Restoring the databases To start the server processes, enter System software maintenance Appendix a Port numbers and protocols Port usage page 57 lists the port usage details for MCG TCP JVM Procedure Generating self-signed certiﬁcates Appendix B Self-signed certiﬁcate generationUsr/java/jdk1.5.003/bin/keytool -genkey Days. Nortel recommends using a value 3650 Index Copyright 2007, 2008 Nortel Networks Page Nortel Mobile Communication 3100 Series Portfolio