Apple Mac OS X Server Version 10.4 or Later Manual do Utilizador Página 96

  • Descarregar
  • Adicionar aos meus manuais
  • Imprimir
  • Página
    / 113
  • Índice
  • MARCADORES
  • Avaliado. / 5. Com base em avaliações de clientes
Vista de página 95
96 Appendix Certificates and Security
The Certificate Manager in Server Admin doesn’t allow you to sign and issue certificates
as a CA, nor does it allow you to sign and issue certificates as a root authority. If you
need any of these functions, you can use Apples CA Assistant in /Applications/Utilities/.
It allows these functions, and others. Self-signed and CA-issued certificates created in
Apples CA Assistant can be used in the Certificate Manager, by importing the
certificate.
The Certificate Manager displays the following for each certificate:
The domain name for which the certificate was issued.
Its dates of validity.
Its signing authority (such as the CA entity or if the certificate is self-signed, it reads
“Self-Signed”
Readying Certificates
Before you can use SSL in Mac OS X Server’s services, the certificates must be created or
imported. You can create your own self-signed certificate, generate a Certificate Signing
Request (CSR) to send to a CA, or import a certificate previously created with OpenSSL.
Requesting a Certificate From a CA
The manager helps you create a certificate signing request (CSR) to send to your
designated CA.
To request a signed certificate:
1 In Server Admin, select the server which has services that support SSL.
2 Click Settings.
3 Select the Certificates tab.
4 Click the Add (+) button.
5 Fill out identity information.
The common name is the fully qualified domain name of the server which will use SSL-
enabled services.
6 Enter starting and ending validity dates.
7 Select a private key size (1024 bits is the default).
8 Enter a passphrase for the private key.
9 This passphrase should be more secure than a normal password.
It is recommended you use at least 20 characters, include mixed case, numbers and/or
punctuation, have no characters repeat, and having no dictionary terms.
10 Click “Request Signed Certificate....”
11 Follow the onscreen directions for requesting a signed certificate from your chose CA.
For example, you may need to do it online or enter the email address.
Vista de página 95
1 2 ... 91 92 93 94 95 96 97 98 99 100 101 ... 112 113

Comentários a estes Manuais

Sem comentários