Home » Lantronix Manuals » Electronics Accessories » Lantronix PremierWave 2050 » Manual Viewer

Lantronix PremierWave 2050 User Guide - Page 57

CSR (Certificate Signing Request), Administration > CSR Certificate Signing Request, Create

View all Lantronix PremierWave 2050 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 57 highlights

7: Administration CSR (Certificate Signing Request) The PremierWave 2050 module uses the Secure Socket Layer (SSL) protocol for any encrypted network traffic between itself and a connected client. During the connection establishment the PremierWave 2050 module has to expose its identity to a client using a cryptographic certificate. Upon leaving the factory this certificate and the underlying secret key is the same for all PremierWave 2050 modules and will not match the network configuration where it is installed. The certificate's underlying secret key is also used for securing the SSL handshake. Leaving the default certificate unmodified is all right in most circumstances and is necessary only if the network facility is vulnerable to man-in-the-middle attack. It is possible to generate and install a new base64 encoded x.509 certificate that is unique for a particular PremierWave 2050 module. The PremierWave 2050 module is able to generate a new cryptographic key and the associated Certificate Signing Request (CSR) that needs to be certified by a certification authority (CA). To create and install an SSL certificate, perform the following steps. 1. Click Administration > CSR (Certificate Signing Request). The Certificate Signing Request page displays. 2. Modify the following fields: Table 7-12 SSL CSR (Certificate Signing Request) Field Description Country (2 Letter code) The country where the organization is located. This is the two-letter ISO code (e.g., US for the United States). State/Province The state or province where the organization is located. Locality (City) The city where the organization is located. Organization The organization name to which the PremierWave 2050 module belongs. Organization Unit Common Name Key length This field specifies to the department within an organization to which the PremierWave 2050 module belongs. The network name of the PremierWave 2050 module once it is installed in the user's network (usually the fully qualified domain name). It is identical to the name that is used to access the PremierWave 2050 module with a web browser without the prefix http://. In case the name given here and the actual network name differ, the browser will pop up a security warning when the PremierWave 2050 module is accessed using HTTPS. Select the key length. 3. Click Create to initiate the Certificate Signing Request generation. Download the CSR by clicking Download. The Download button displays when a certificate is created. Send the saved CSR to a CA for certification. 4. Click Upload to upload the signed certificate from the computer to the PremierWave 2050 module. The PremierWave 2050 module now has its own certificate used for identifying itself to its clients. PremierWave® 2050 Enterprise Wi-Fi® IoT Module User Guide 57

Section	Page
PremierWave 2050 Enterprise Wi-Fi IoT Module User Guide	1
Intellectual Property	2
Open Source Software	2
Warranty	2
Contacts	2
Disclaimer	3
Revision History	3
Table of Contents	4
List of Figures	8
List of Tables	9
1: Using This Guide	10
Purpose and Audience	10
Summary of Chapters	10
Additional Documentation	10
2: Introduction	12
Key Features	12
Applications	12
Protocol Support	13
Troubleshooting Capabilities	13
Configuration Methods	14
Addresses and Port Numbers	14
Hardware Address	14
IP Address	14
Port Numbers	14
Product Information Label	15
3: Using DeviceInstaller	16
Installing DeviceInstaller	16
Accessing the PremierWave 2050 Using DeviceInstaller	16
Next Step	18
4: Configuration Using Web Manager	19
Accessing Web Manager	19
To access Web Manager through a web browser:	19
Status Page	20
Web Manager Components	21
Web Manager pages have these sections:	21
Navigating Web Manager	22
5: Network Settings	24
Access Point	24
To Configure Access Point Settings	24
Using Web Manager	24
Using the CLI	24
Using XML	24
Bridge	25
Bridge Status and Configuration	26
To View or Configure Bridge Settings	26
Using Web Manager	26
Using the CLI	26
Using XML	26
Wired (eth0) Network	26
Interface Status and Configuration	26
To Configure Network Interface Settings	28
Using Web Manager	28
Using the CLI	28
Using XML	28
Link Status and Configuration	29
To Configure Network Link Settings	29
Using Web Manager	29
Using the CLI	29
Using XML	29
Wireless (wlan0) Network	29
Interface Status and Configuration	29
To Configure Wireless Network Interface Settings	31
Using Web Manager	31
Using the CLI	31
Using XML	31
Link Status and Configuration	32
To Configure Network Link Settings	32
Using Web Manager	32
Using the CLI	32
Using XML	32
Protocol Stack	32
IP Settings	32
Using Web Manager	33
Using the CLI	33
Using XML	33
To Configure ICMP Protocol Stack Settings	33
Using Web Manager	33
Using the CLI	33
Using XML	33
ARP Settings	34
Wi-Fi Protected Setup	34
To Initiate WPS	35
Using Web Manager	35
Using the CLI	35
Using XML	35
To Show WPS Status	35
Using the CLI	35
Using XML	35
WLAN Scan/QuickConnect	35
To View WLAN Link Scan and Status Information	36
Using Web Manager	36
Using the CLI	36
Using XML	36
WLAN Profiles	36
Configuring WLAN Profile Settings	37
Using Web Manager	37
Using the CLI	37
Using XML	37
6: Diagnostics	40
DNS	40
Accessing the DNS Settings	40
Using Web Manager	40
Using CLI	41
Using XML	41
Hardware	41
To View Hardware Information	41
Using Web Manager	41
Using the CLI	41
Using XML	41
IP Sockets	41
To View the List of IP Sockets	41
Using Web Manager	41
Using the CLI	41
Using XML	41
Log	42
To Configure the Diagnostic Log Output	42
Using Web Manager	42
Using the CLI	42
Using XML	42
Memory	42
To View Memory Usage	42
Using Web Manager	42
Using the CLI	42
Using XML	42
Ping	42
To Ping a Remote Host	43
Using Web Manager	43
Using the CLI	43
Using XML	43
Processes	43
To View Process Information	43
Using Web Manager	43
Using the CLI	43
Using XML	43
Routes	43
Using Web Manager	43
Using CLI	43
Using XML	43
Threads	44
To View Thread Information	44
Using Web Manager	44
Using the CLI	44
Using XML	44
Traceroute	44
To Perform a Traceroute	44
Using Web Manager	44
Using the CLI	44
Using XML	44
7: Administration	45
CLI	45
CLI Status and Configuration	45
To View and Configure Basic CLI Settings	46
Using Web Manager	46
Using the CLI	46
Using XML	46
Clock	46
To Specify a Clock-Setting Method	47
Using Web Manager	47
Using the CLI	47
Using XML	47
Discovery	47
To Configure Discovery	47
Using Web Manager	47
Using the CLI	47
Using XML	47
FTP	48
To Configure FTP Settings	48
Using Web Manager	48
Using the CLI	48
Using XML	48
HTTP	48
Interface Status and Configuration	48
To View or Configure HTTP	49
Using Web Manager	49
Using the CLI	49
Using XML	50
To Configure HTTP Authentication	50
Using Web Manager	50
Using the CLI	50
Using XML	50
Line	50
Line (1 or 2) Status and Configuration	51
To View and Configure Line Configuration and Command Mode	52
Using Web Manager	52
Using the CLI	53
Using XML	53
SSL	53
Credentials	53
To Create a New Credential	53
Using Web Manager	53
Using the CLI	53
Using XML	53
To Delete a Credential	53
Using Web Manager	53
Using CLI	54
Using XML	54
To Configure an SSL Credential to Use an Uploaded Certificate	55
To Configure an SSL Credential to Use a Self-Signed Certificate	55
Trusted Authorities	56
To Upload an Authority Certificate	56
To upload a trusted authority certificate:	56
CSR (Certificate Signing Request)	57
Syslog	58
To Configure Syslog Settings	58
Using Web Manager	58
Using CLI	58
Using XML	58
System	58
To Reboot or Restore Factory Defaults	59
Using Web Manager	59
Using the CLI	59
Using XML	59
Terminal	59
To Configure the Terminal Network Connection	60
Using Web Manager	60
Using the CLI	60
Using XML	60
To Configure the Terminal Line Connection	60
Using Web Manager	60
Using the CLI	60
Using XML	60
User Management	61
To Change the User Admin Password	61
Using the CLI	61
Using XML	61
XML	61
To Export Configuration	61
Using Web Manager	61
Using the CLI	62
Using XML	62
To Export Status	62
Using Web Manager	62
Using the CLI	62
Using XML	62
To Import Configuration	62
Using Web Manager	62
Using the CLI	63
Using XML	63
Quick Setup	63
To Utilize Quick Setup	63
Using Web Manager	63
Using the CLI	64
Using XML	64

Match case Limit results 1 per page

7: Administration

PremierWave® 2050 Enterprise Wi-Fi® IoT Module User Guide

CSR (Certificate Signing Request)

The PremierWave 2050 module uses the Secure Socket Layer (SSL) protocol for any encrypted

network traffic between itself and a connected client. During the connection establishment the

PremierWave 2050 module has to expose its identity to a client using a cryptographic certificate.

Upon leaving the factory this certificate and the underlying secret key is the same for all

PremierWave 2050 modules and will not match the network configuration where it is installed. The

certificate’s underlying secret key is also used for securing the SSL handshake. Leaving the

default certificate unmodified is all right in most circumstances and is necessary only if the network

facility is vulnerable to man-in-the-middle attack.

It is possible to generate and install a new base64 encoded x.509 certificate that is unique for a

particular PremierWave 2050 module. The PremierWave 2050 module is able to generate a new

cryptographic key and the associated Certificate Signing Request (CSR) that needs to be certified

by a certification authority (CA).

To create and install an SSL certificate, perform the following steps.

Click

Administration > CSR (Certificate Signing Request)

. The Certificate Signing Request

page displays.

Modify the following fields:

Table 7-12

SSL CSR (Certificate Signing Request)

Click

Create

to initiate the Certificate Signing Request generation. Download the CSR by

clicking

Download

. The

Download

button displays when a certificate is created. Send the

saved CSR to a CA for certification.

Click

Upload

to upload the signed certificate from the computer to the PremierWave 2050

module. The PremierWave 2050 module now has its own certificate used for identifying itself

to its clients.

Field

Description

Country (2 Letter code)

The country where the organization is located. This is the two-letter ISO code

(e.g., US for the United States).

State/Province

The state or province where the organization is located.

Locality (City)

The city where the organization is located.

Organization

The organization name to which the PremierWave 2050 module belongs.

Organization Unit

This field specifies to the department within an organization to which the

PremierWave 2050 module belongs.

Common Name

The network name of the PremierWave 2050 module once it is installed in the

user’s network (usually the fully qualified domain name). It is identical to the

name that is used to access the PremierWave 2050 module with a web browser

without the prefix http://. In case the name given here and the actual network

name differ, the browser will pop up a security warning when the PremierWave

2050 module is accessed using HTTPS.

Key length

Select the key length.