Configuring Certificates - HP 635n - JetDirect IPv6/IPsec Print Server Administrator's Manual

The Certificates page provides the status of the certificates installed on the HP Jetdirect print server:
■ Jetdirect certificate. The Jetdirect certificate is used to validate the identity of the Jetdirect
device to clients and to network authentication servers.
By factory default, a self-signed Jetdirect certificate is preinstalled. This allows the embedded
Web server to use HTTPS and appear as a secure site when accessed by a Web browser.
Click View to view the contents of an installed Jetdirect certificate, or click Configure to update
or install a new one. See
When installed, a Jetdirect certificate will be saved across a cold-reset, which is used to restore
the print server to factory-default values.
■ CA Certificate. (Full-featured print servers only) A certificate from a trusted third party, or
Certificate Authority (CA), is used to validate the identity of a network authentication server
during 802.1X authentication methods that use EAP (Extensible Authentication Protocol). The
authentication server's identity is validated when information on the CA certificate matches the
information on a certificate received from the authentication server.
A CA certificate for the print server is a certificate that was used to sign the authentication
server's certificate. Therefore, the Certificate Authority for the authentication server's certificate
must also be used for the CA certificate.
Click View to view the contents of an installed Jetdirect certificate, or click Configure to update
or install a new one. See
A CA certificate is not saved when the print server is reset to factory-default values.

Configuring Certificates

When you click Configure, a certificate management wizard will help you update or install a
certificate. The screens displayed will depend on the type of certificate (Jetdirect or CA) and your
selections. Table 4-15 Certificate Configuration Screens
configuration parameters that may appear.
NOTE
Cancel button), an Operation Failed screen may appear. If so, wait approximately two
minutes before entering the wizard again.
Table 4-15 Certificate Configuration Screens
Certificate Options screen. The options provided will depend on your print server model. Choose an option.
■
ENWW
Configuring
Configuring
If you improperly exit Certificates configuration (for example, by failing to use the
Update Pre-Installed Certificate. Use this option to update the pre-installed, self-signed certificate. When
updated, the pre-installed certificate is overwritten. You may update the following item:
Certificate Validity Period
With self-signed certificates, the browser will identify the certificate as self-signed for each new Web
session and may cause a security alert message. This message can be bypassed if the user adds it to their
browser's certificate store or disables browser alerts (not recommended).
Self-signed certificates are not necessarily secure because the certificate owner is merely confirming his
own identity instead of verification by a trusted third party. Certificates from a trusted third party are
considered more secure.
Certificates.
Certificates.
provides a description of the screens and
Networking Tab 87