
Enable Secure Sockets Layer (SSL)
HP Web Jetadmin administrators enable SSL by adding a certificate to the HP Web Jetadmin application. This
certificate forces the browser to use the more secure HTTPS protocol when a user accesses the client logon
page. The administrator must enable SSL from the console or host that runs the application by using the
procedure in
Configure HTTPS (Server Certificates or SSL) on page 15. When a remote administrator
accesses Tools > Options > Shared > Network > HTTPS, a message appears stating that certificates can only
be installed from an HP Web Jetadmin client that runs on the console or server that hosts HP Web Jetadmin.
In some environments, SSL is required when an HTTP interface or service is used for communication. In these
cases, SSL can be enabled and enforced by HP Web Jetadmin. SSL provides a high level of assurance
regarding the authentication and encryption of HTTP communication. That is, a user who requests access to
the HP Web Jetadmin Smart Client download can be reasonably assured that the system hosting
HP Web Jetadmin is authentic and the communication between the two systems is encrypted so that it
cannot be easily read by eavesdroppers.
The SSL protocol uses certificates to accommodate both authentication and encryption. HP Web Jetadmin
can generate a signing request that can be used by a certificate authority (CA) to generate a certificate. Using
Tools > Options > Shared > Network > HTTPS, the user can generate a Signing Request.
Once the request has been fulfilled by the CA, the certificate is ready to be installed on HP Web Jetadmin.
Remember, you must be at the application console to use Tools > Options > Shared > Network > HTTPS. Use
Install Certificate to browse and upload the certificate file.
Once the certificate is installed, the HTTP service enforces SSL. Any browser contact with HP Web Jetadmin
should indicate HTTPS on the URL when a certificate is installed. Using Remove Certificate uninstalls the
certificate and SSL is no longer enforced.
Important Points to Remember When Implementing SSL
Client communication with SSL enforced requires one or more of the following considerations.
●
For new server certificates, you must install 2048-bit certificates. Any previously installed 1024-bit
server certificates continue to function correctly.
●
When SSL has been implemented on HP Web Jetadmin with an internal certificate authority (CA), the
CA’s authorizing certificate must be installed in the client browser. If this certificate is not installed in
the client browser the HP Web Jetadmin Smart Client page will fail to load up in SSL mode.
●
Proxy servers tend to use the standard SSL port 443. If the HP Web Jetadmin Smart Client page is being
called through a proxy server, a redirect error may occur. This is due to the URL being redirected to 443
rather than 8443 which is the port used by the HP Web Jetadmin SSL. The workaround for this is to place
the HP Web Jetadmin fully qualified domain name (FQDN) into the browsers exceptions list under
Tools > Internet Options > Connections > LAN Settings > Advanced. This causes the browser to pull
HTTP and HTTPS content directly from the HP Web Jetadmin server.
NOTE: HP Web Jetadmin HTTP and HTTPS port numbers can be customized to something other than
8000 and 8443.
●
When you have implemented SSL on HP Web Jetadmin, a redirect occurs when the browser URL uses
port 8000. Here is an example:
The known URL prior to SSL implementation is http://servername.domain.xxx:8000.
After SSL implementation, HP Web Jetadmin will redirect this to a new URL: https://
servername.domain.xxx:8443.
The URLs shown here use FQDN. In most cases the certificate issued and installed in the
HP Web Jetadmin SSL implementation will contain an FQDN for the host on which HP Web Jetadmin is
14 Install and Set Up HP Web Jetadmin ENWW
Comentários a estes Manuais