HP JetAdvantage Security Manager 10 Device E-LTU Manual do Utilizador descarregar pdf (Página 4)

certificate from one of the devices and using a tool such as Web Jetadmin to install it on the affected

devices in one easy step. Since self-signed certificates cannot provide authentication/trust, having the

same self-signed certificate on multiple devices still provides the desired encryption.

IDENTITY CERTIFICATES

Identity certificates

(also known as

Jetdirect or CA

signed certificates)

are installed to

replace self-signed

certificates to provide

identity in addition to

encryption. Have

you ever seen the

warning dialog below when using https:// to access a printer in a web browser? This dialog talks

about a “security certificate” being invalid. A security certificate is there to help identify the web site

as one that can be trusted. However, the dialog is telling us that we may not want to trust this security

certificate – which indirectly means that this web site may not be the web site we think it is. This is

because the certificate on the printer is a self-signed Jetdirect certificate, which is the Jetdirect device

saying “you can trust me because I say I am Jetdirect.”

An identity certificate that is signed by a Certificate Authority can be generated and installed on the

printer to eliminate this message (once the client machine has knowledge of the Certificate Authority

through something called a “CA certificate” being installed). Since Jetdirect only has one Identity

certificate that can be configured, it must be capable of being used in a variety of situations. Jetdirect

can act as a client or a server, depending on the protocol being used. For instance, if a web browser

is using HTTPS to communicate to Jetdirect, Jetdirect will return its Identity certificate as part of the

SSL/TLS negotiation process, which will identify Jetdirect as a server. IPPS also involves a client pc

submitting a job to Jetdirect as the server and using the Jetdirect identity s=certificate for

authentication. These are both examples of one-way trust or authentication. In other cases, like EAP-

TLS in 802.1x environments, Jetdirect will send its Identity certificate for client authentication to access

a protected network. This would be an example of Mutual Authentication in which a client process

must prove its identity to a server, and the server must prove its identity to the client, before any

application traffic is sent over the client-to-server connection.

1 2 3 4 5 6 7 8 9 ... 30 31

Sem comentários

HP JetAdvantage Security Manager 10 Device E-LTU Manual do Utilizador Página 4