简单介绍一下关于Radware全系类产品证书更新。
一、Alteon设备
日志信息显示 Certificate WebManagementCert has expired,表明需要对设备的管理证书更新。
更新证书流程如下:
1、通过Console口或者SSH登录到命令行。
2、输入命令/cfg/sys/access/https/generate
>> Main# /cfg/sys/access/https/generate
Certificate WebManagementCert is not associated SSL inspection
Certificate WebManagementCert is not associated to any SSL related Health Checks
Removal of WBM certificate completed successfully
This operation will generate a self-signed certificate.
Enter key size [512|1024|2048|4096] [2048]:
Enter certificate hash algorithm [md5|sha1|sha256|sha384|sha512] [sha256]:
Enter certificate Common Name (e.g. your site's name): radware
Enter certificate Subject Alternative Names (SAN)? [y/n]: n
Use certificate default values? [y/n]: y
Enter certificate validation period in days (1-3650) [365]: 3650
.
Self signed certificate, certificate signing request and key added.
3、管理证书更新完成,重新刷新网页登入设备。
二、(Application Delivery,LinkProof,DefensePro)设备
日志信息显示WARNING Certificate named radware expired on WED MAY 08 13:52:20 2019,表明需要对管理证书更新。
更新证书流程如下:
1、通过Console口或者SSH登录到设备。
DefensePro#security certificate table set
security certificate table help:
set
destroy/del
create/add
help <-switch> (帮助)
Switches:
-t : Entry Type
-s : Key Size
-p : Key Passphrase
-cn : Common Name
-l : Locality
-sp : State Or Province
-org : Organization
-o : Organization Unit
-c : Country Name
-e : Email
-ev : Certificate Validity [days]
根据上述内容进行配置
示例:
DefensePro#security certificate table add Radware_1 -t Certificate -s 2048 -p 123456 -cn Radware -l Radware -sp Radware web server -org Radware -o Radware -c Radware -ev 3650
2、通过浏览器访问管理地址登录WebUI。
1)进入Security >Certificates>Table;
2)点击Create。
1)填写“Name”;
2)选择Entry Type:Certificate;
3)选择Key Size:2048;
4)输入Key Passphase;
5)填写“Common Name”;
6)填写“Locality”;
7)填写“State Or Province”;
8)填写“Organization”;
9)填写“Country Name”
10)填写“Certificate Validity [days]”
3、使用下面命令,将Web管理证书替换成已创建的证书。
DefensePro#manage secure-web certfile set Radware_1
Updated successfully
Web Server Certificate File: Radware_1
4、管理证书更新完成,重新刷新网页登入设备。
本期内容讲解的是关于Alteon和(Application Deliver,LinkProof,DefensePro)设备Web管理证书更新。
下期内容讲解Radware监控平台Vision Web管理证书更新。