HP Jetdirect 610n HP Jetdirect Print Servers - HP Jetdirect and SSL/TLS - Page 81

Correct HP Jetdirect CA Configuration

Get HP Jetdirect 610n PDF manuals and user guides View all HP Jetdirect 610n manuals
Add to My Manuals
Save this manual to your list of manuals

Page 81 highlights

R2's Info + R2's Public Key RootCA's Digital Signature R2's Certificate RootCA.example.internal Root Certificate Authority: RootCA R2.example.internal Subordinate Certificate Authority: R2 RootCA's Info + RootCA's Public Key RootCA's Digital Signature RootCA's Certificate What Certificates should be configured on Jetdirect so that an SSL Client will be successful? RootCA's Info + RootCA's Public Key RootCA's Digital Signature CORRECT! RootCA's Certificate LJ 4345MFP's Info + Public Key R2's Digital Signature LJ 4345MFP's Identity Certificate Figure 35 - Correct HP Jetdirect CA Configuration Be sure the Root CA of your CA Hierarchy has its public key certificate configured on Jetdirect! Here is a question for you: When Jetdirect is acting as a client and receives the server's certificate signed by R2, how can it know that R2's certificate was signed by RootCA? The answer: It cannot! Another special thing must happen: The server must send R2's CA certificate along with its own certificate. This allows Jetdirect to "walk the chain" and verify the certificate chain is valid. Refer to Figure 36 - Walking the Chain 1 81

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
81
Root Certificate Authority: RootCA
Subordinate Certificate Authority: R2
RootCA.example.internal
R2.example.internal
RootCA’s Certificate
RootCA’s
Public Key
RootCA’s Digital
Signature
RootCA’s Info +
R2’s Certificate
R2’s Public Key
RootCA’s Digital
Signature
R2’s Info +
LJ 4345MFP’s Identity
Certificate
Public Key
R2’s Digital
Signature
LJ 4345MFP’s Info +
What Certificates should be configured on
Jetdirect so that an SSL Client will be
successful?
RootCA’s Certificate
RootCA’s
Public Key
RootCA’s Digital
Signature
RootCA’s Info +
CORRECT!
Figure 35 - Correct HP Jetdirect CA Configuration
Be sure the Root CA of your CA Hierarchy has its public key certificate configured on Jetdirect!
Here is a question for you:
When Jetdirect is acting as a client and receives the server’s certificate
signed by R2, how can it know that R2’s certificate was signed by RootCA?
The answer: It cannot!
Another special thing must happen:
The server must send R2’s CA certificate along with its own
certificate.
This allows Jetdirect to “walk the chain” and verify the certificate chain is valid.
Refer to
Figure 36 – Walking the Chain 1