HP t420 Administrator Guide - Page 65

Certificates, Certificate Manager, SCEP Manager

Get HP t420 PDF manuals and user guides View all HP t420 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 65 highlights

Menu option Keyboard Shortcuts Snipping Tool Task Manager Text Editor X Terminal Description Lets you create, modify, and delete keyboard shortcuts. Lets you take a snapshot of a rectangular selection of the screen, a specific window, or the entire screen. Lets you monitor the CPU usage and the CPU usage history for the thin client. Opens a basic text editor for viewing and editing text files. Lets you execute Linux commands. Certificates NOTE: For more information about using certificates in Linux, go to http://www.openssl.org/docs/apps/ x509.html. Certificate Manager To open the Certificate Manager: ▲ Select Advanced > Certificates in Control Panel. Use the Certificate Manager to manually install a certificate from a certificate authority (CA). This action copies the certificate to the user's local certificate store (/usr/local/share/ca-certificates) and configures OpenSSL to use the certificate for connection verification. If desired, use Profile Editor to attach the certificate to a profile, as described in Adding certificates to a client profile on page 62. NOTE: Generally, a self-signed certificate will work as long as it is valid according to specification and can be verified by OpenSSL. SCEP Manager To open the SCEP Manager: ▲ Select Advanced > SCEP Manager in Control Panel. Use the SCEP Manager when you need to enroll or renew client-side certificates from a CA. During an enrollment or renewal, the SCEP Manager generates the thin client's private key and certificate request, and then it sends the request to the CA on the SCEP server. When the CA issues the certificate, the certificate is returned and placed in the thin client's certificate store. OpenSSL uses the certificate for connection verification. NOTE: Before enrollment, make sure that the SCEP server is configured properly. Use the Identifying tab of the SCEP Manager to enter information about the user, if desired. NOTE: The Common Name is required and is the thin client's Fully Qualified Domain Name (FQDN) by default. The other information is all optional. The Country or Region is entered as two letters, such as US for the United States and CN for China. Use the Servers tab of the SCEP Manager to add SCEP servers and enroll or renew certificates. Advanced 53

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
Menu option
Description
Keyboard Shortcuts
Lets you create, modify, and delete keyboard shortcuts.
Snipping Tool
Lets you take a snapshot of a rectangular selection of the screen,
a
specific
window, or the entire screen.
Task Manager
Lets you monitor the CPU usage and the CPU usage history for the
thin client.
Text Editor
Opens a basic text editor for viewing and editing text
files.
X Terminal
Lets you execute Linux commands.
Certificates
NOTE:
For more information about using
certificates
in Linux, go to
docs/apps/
x509.html
.
Certificate
Manager
To open the
Certificate
Manager:
▲
Select
Advanced >
Certificates
in Control Panel.
Use the
Certificate
Manager to manually install a
certificate
from a
certificate
authority (CA). This action
copies the
certificate
to the user’s local
certificate
store
(/usr/local/share/ca-certificates)
and
configures
OpenSSL to use the
certificate
for connection
verification.
If desired, use
Profile
Editor to attach the
certificate
to a
profile,
as described in
Adding
certificates
to a client
profile
on page
62
.
NOTE:
Generally, a self-signed
certificate
will work as long as it is valid according to
specification
and can be
verified
by OpenSSL.
SCEP Manager
To open the SCEP Manager:
▲
Select
Advanced > SCEP Manager
in Control Panel.
Use the SCEP Manager when you need to enroll or renew client-side
certificates
from a CA.
During an enrollment or renewal, the SCEP Manager generates the thin client’s private key and
certificate
request, and then it sends the request to the CA on the SCEP server. When the CA issues the
certificate,
the
certificate
is returned and placed in the thin client’s
certificate
store. OpenSSL uses the
certificate
for
connection
verification.
NOTE:
Before enrollment, make sure that the SCEP server is
configured
properly.
Use the
Identifying
tab of the SCEP Manager to enter information about the user, if desired.
NOTE:
The
Common Name
is required and is the thin client’s Fully
Qualified
Domain Name (FQDN) by
default. The other information is all optional. The
Country or Region
is entered as two letters, such as US for
the United States and CN for China.
Use the
Servers
tab of the SCEP Manager to add SCEP servers and enroll or renew
certificates.
Advanced
53