TP-Link TL-SG3216 SSH Config, ¾ Global Config, ¾ Certificate Download, ¾ Key Download, Key File

Figure 4-15 SSL Config

The following entries are displayed on this screen:

¾Global Config

SSL: Select Enable/Disable the SSL function on the switch.

¾Certificate Download

Certificate File: Select the desired certificate to download to the switch. The

certificate must be BASE64 encoded.

¾Key Download

Key File:	Select the desired SSL Key to download to the switch. The key
	must be BASE64 encoded.

Note:

1.The SSL certificate and key downloaded must match each other; otherwise the HTTPS connection will not work.

2.The SSL certificate and key downloaded will not take effect until the switch is rebooted.

3.To establish a secured connection using https, please enter https:// into the URL field of the browser.

4.It may take more time for https connection than that for http connection, because https connection involves authentication, encryption and decryption etc.

4.4.3 SSH Config

As stipulated by IETF (Internet Engineering Task Force), SSH (Secure Shell) is a security protocol established on application and transport layers. SSH-encrypted-connection is similar to a telnet connection, but essentially the old telnet remote management method is not safe, because the password and data transmitted with plain-text can be easily intercepted. SSH can provide information security and powerful authentication when you log on to the switch remotely through an insecure network environment. It can encrypt all the transmission data and prevent the

23