Managing SteelHeads : Configuring web settings
  
Configuring web settings
You can modify Management Console web user interface and certificate settings in the Administration > Security: Web Settings page.
To modify web settings
1. Choose Administration > Security: Web Settings to display the Web Settings page.
2. Under Web Settings, complete the configuration as described in this table.
Control
Description
Default Web Login ID
Specify the username that appears in the authentication page. The default value is admin.
Web Inactivity Timeout
Specify the number of idle minutes before time-out. The default value is 15. A value of 0 disables the inactivity time-out. If the maximum session count is exceeded, the last recently used session will be expired regardless of its idle time.
The web session inactivity time-out and the CLI interface inactivity time-out are configured separately:
• To set the CLI interface inactivity time-out for the current and future login sessions run the cli default auto-logout <time-period-in-minutes> command.
• To set the CLI interface inactivity time-out for the current session only run the cli session auto-logout <time-period-in-minutes> command.
• To view the CLI settings run the show cli command.
Allow Session Timeouts When Viewing Auto-Refreshing Pages
By default, session time-out is enabled, which stops the automatic updating of the report pages when the session times out.
Disabling this feature poses a security risk. When you disable this feature, you are logged in indefinitely on pages that are automatically refreshed, such as reports.
Apply
Applies your settings to the running configuration.
3. Click Save to Disk to save your settings permanently.
Managing web SSL certificates
RiOS provides these security features to manage SSL certificates used by the SteelHead appliance Management Console through HTTPS:
• Generate the certificate and key pairs on the SteelHead. This method overwrites the existing certificate and key pair regardless of whether the previous certificate and key pair was self-signed or user added. The new self-signed certificate lasts for one year (365 days).
• Create certificate signing requests from the certificate and key pairs.
• Replace a signed certificate with one created by an administrator or generated by a third-party certificate authority.
To modify web certificates
1. Choose Administration > Security: Web Settings to display the Web Settings page.
2. Under Web Certificate, select the Details tab.
The SteelHead identity certificate details appear, as described in this table.
Control
Description
Issued To/Issued By
Common Name—Specifies the common name of the certificate authority.
Email—Specifies the email address of the certificate administrator.
Organization—Specifies the organization name (for example, the company).
Locality—Specifies the city.
State—Specifies the state.
Country—Specifies the country.
Serial Number—Specifies the serial number (Issued To, only).
Validity
Issued On—Specifies the date the certificate was issued.
Expires On—Specifies the date the certificate expires.
Fingerprint
Specifies the SSL fingerprint.
Key
Type—Specifies the key type.
Size—Specifies the size in bytes.
3. To replace an existing certificate, under Web Certificate, select the Replace tab and complete the configuration as described in this table.
Control
Description
Import Certificate and Private Key
Imports the certificate and key.
The page displays controls for browsing to and uploading the certificate and key files. You can also use the text box to copy and paste a PEM file.
The private key is required regardless of whether you are adding or updating the certificate.
Certificate
Upload—Browse to the local file in PKCS-12, PEM, or DER formats.
Paste it here (PEM)—Copy and then paste the contents of a PEM file.
Private Key
Select the private key origin.
• The Private Key is in a separate file (see below)—You can either upload it or copy and paste it.
• This file includes the Certificate and Private Key
• The Private Key for this Certificate was created with a CSR generated on this appliance.
Separate Private Key
Upload (PEM or DER formats)—Browse to the local file in PEM or DER formats.
Paste it here (PEM only)—Paste the contents of a PEM file.
Decryption Password—Specify the decryption password, if necessary. Passwords are required for PKCS-12 files, optional for PEM files, and never needed for DER files.
4. To generate a CSR, under Web Certificate, select the Generate CSR tab and complete the configuration as described in this table.
Control
Description
Common Name
Specify the common name (hostname).
Organization Name
Specify the organization name (for example, the company).
Organization Unit Name
Specify the organization unit name (for example, the section or department).
Locality
Specify the city.
State
Specify the state. Do not abbreviate.
Country
Specify the country (2-letter code only).
Email Address
Specify the email address of the contact person.
Generate CSR
Generates the Certificate Signing Request.
5. Click Apply to apply your changes to the running configuration.
6. Click Save to Disk to save your settings permanently.
7. Click Add.