HP t628 Administrator Guide - Page 65
Certificates, Certificate Manager, SCEP Manager
View all HP t628 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 65 highlights
Menu option Keyboard Shortcuts Snipping Tool Task Manager Text Editor X Terminal Description Lets you create, modify, and delete keyboard shortcuts. Lets you take a snapshot of a rectangular selection of the screen, a specific window, or the entire screen. Lets you monitor the CPU usage and the CPU usage history for the thin client. Opens a basic text editor for viewing and editing text files. Lets you execute Linux commands. Certificates NOTE: For more information about using certificates in Linux, go to http://www.openssl.org/docs/apps/ x509.html. Certificate Manager To open the Certificate Manager: ▲ Select Advanced > Certificates in Control Panel. Use the Certificate Manager to manually install a certificate from a certificate authority (CA). This action copies the certificate to the user's local certificate store (/usr/local/share/ca-certificates) and configures OpenSSL to use the certificate for connection verification. If desired, use Profile Editor to attach the certificate to a profile, as described in Adding certificates to a client profile on page 62. NOTE: Generally, a self-signed certificate will work as long as it is valid according to specification and can be verified by OpenSSL. SCEP Manager To open the SCEP Manager: ▲ Select Advanced > SCEP Manager in Control Panel. Use the SCEP Manager when you need to enroll or renew client-side certificates from a CA. During an enrollment or renewal, the SCEP Manager generates the thin client's private key and certificate request, and then it sends the request to the CA on the SCEP server. When the CA issues the certificate, the certificate is returned and placed in the thin client's certificate store. OpenSSL uses the certificate for connection verification. NOTE: Before enrollment, make sure that the SCEP server is configured properly. Use the Identifying tab of the SCEP Manager to enter information about the user, if desired. NOTE: The Common Name is required and is the thin client's Fully Qualified Domain Name (FQDN) by default. The other information is all optional. The Country or Region is entered as two letters, such as US for the United States and CN for China. Use the Servers tab of the SCEP Manager to add SCEP servers and enroll or renew certificates. Advanced 53