Q-See Remote Client Software V 4.0.1 Spécifications télécharger pdf (Page 101)

VMware, Inc. 101

Chapter 5 Client Management

YoucanreplacethedefaultcertificateprovidedwithViewwithaproperlydefined

certificatefortheservice.IfthecertificateissignedbyatrustedCA,userswillnotbe

presentedwithmessagesaskingthemtoverifythecertificate,andthinclientdevices

willbeabletoconnectwithoutrequiringadditional

configuration.

TocreateandinstallyourowncertificateyoumustfirstaddtheJavakeytoolutilityto

yourcommandpathsothatyoucanexecuteitfromanylocationusingthecommand

prompt.Oncethisisdone youcancreateaself‐signedSSLcertificateusingthekeytool

utility.

Toobtain

avalidatedcertificatethathasbeensignedbyatrustedthird‐partyyoumust

firstsubmitacertificatesigningrequest(CSR)totheCA.Onceyouhavereceiveda

trustedcertificatefromtheCAyoucanimportitintothekeystorefortheView

ConnectionServer,andthenconfigureViewConnection

Servertouseit.

Creating an SSL Certificate

Decidingwhatnametobindtoacertificateisanimportantconsideration.Acertificate

bindsthenameoftheservicetoacryptographickeypairand,indoingso,assumes

ownershipoftheserviceandkeys.

Oncethecertificateissignedtheclientcantrusttheserver(anditscryptographickey)



becausetheCAindependentlydeterminedthattheorganizationthatisclaiming

ownershiprequestedthekey.

Themostimportantpartofthecertificateisthecommonname(CN)attribute.Usethe

FQDNthattheclientcomputerusestoconnecttotheViewConnectionServer.Ina

single‐serverenvironment,thename

istypicallythenameoftheserver.Ifload

balancingisbeingused,usetheload‐balancername.

To add the Java keytool to the system path

1PresstheWindowskey+BreaktodisplaytheWindowsSystemPropertiesdialog

box.

2UndertheAdvancedtab,clickEnvironmentVariables.

3IntheSystemvariablesgroup,selectPATHandthenclickEdit.

OTEYoumayalreadyhaveanSSLcertificatethatyouwanttousewithView

ConnectionServer.Referto“UsingExistingSSLCertificates”onpage 105formore

informationonhowtodothis.

1 2 ... 96 97 98 99 100 101 102 103 104 105 106 ... 231 232

Pas de commentaire

Q-See Remote Client Software V 4.0.1 Spécifications Page 101