Q-See Remote Client Software V 4.0.1 Specifiche Scaricare il pdf (Pagina 100)

View Manager Administration Guide

100 VMware, Inc.

Bydefault,inViewConnectionServerwhenaclientvisitsasecurepagesuchas

View Administratortheyarepresentedwiththeself‐signedcertificateprovidedwith

theapplication.Byreadingtheservercertificatetheusercandecideiftheserverisa

trustedsource,andthenaccept(orreject)theconnection.



ThecertificatecanbesignedbyaCertificateAuthority(CA)—atrustedthirdpartywho

guaranteestheidentityofthecertificateanditscreator.

TocreateyourowncertificateforViewConnectionServerdooneofthefollowing:

 Createaself‐signedcertificateforyoursystemusingthekeytoolutilityprovided

withtheJavaRuntimeEnvironment(JRE)instancethataccompaniesView

ConnectionServer.Self‐signedcertificatesareusergeneratedcertificatesthathave

notbeenofficiallyregisteredwithanytrustedCA,andarethereforenot

guaranteedtobeauthentic.

 Createacertificateandthensendacertificatesigningrequest(CSR)thatcontains

yourcertificatedetailstoaCA.Afterconductingsomechecksonthecompanyor

individualmakingtheapplication,theCAsignstherequestandencryptsitwith

theirprivatekey.Thevalidcertificateisreturnedandisthen

insertedintoa

keystoreonViewConnectionServer.

ClientsconnectingtoViewConnectionServerarepresentedwithyourcertificate.Ifthe

certificateisself‐signedbutacceptedbytheuser,orsignedbyaCAthatistrustedby

theclientbrowser,theclientusesthepublickeycontainedwithinthe

certificateto

encryptthedataitsendstoViewConnectionServer.Typically ,thecertificatefortheCA

itselfisembeddedinthebrowserorislocatedinatrusteddatabasethatisaccessibleby

theclient.

Afteracceptingthecertificate,theclientrespondsbysendingasecretkey,whichis

encrypted

withtheserver’spublickey.Thiskeyisusedtoencrypttrafficbetweenthe

clientandtheViewConnectionServerinstanceorsecurityserver.

Bydefault,ViewConnectionServerincludesaself‐signedSSLcertificatethatclients

canusetocreatesecuresessionswhentheyconnect.Thiscertificateisnot

trustedby

clientsanddoesnothavethecorrectnamefortheservice,butitdoesallowconnectivity.

OTEItisstronglyrecommendedthatyoucontinuetousethedefaultcertificate

providedwithViewConnectionServeruntilyouarereadytocreateyourown

certificateandgetitsignedbyaCA.

OTECertificatesareonlyrequiredforstandard,replica,orsecurityserversthat

receivedirectconnectionsfromtheirclients.Ifyouareusingasecurityserverasyour

client‐facingsystem,onlythisserverwillrequireacertificate.

1 2 ... 95 96 97 98 99 100 101 102 103 104 105 ... 231 232

Q-See Remote Client Software V 4.0.1 Specifiche Pagina 100