Black Box EncrypTight Appliance Trim Kit User Manual


 
10 EncrypTight User Guide
Table of Contents
Changing the EncrypTight Keystore Password ...........................................................................266
Changing the ETKMS Keystore Password..................................................................................266
Changing the Keystore Password on a ETKMS ...................................................................267
Changing the Keystore Password on a ETKMS with an HSM ..............................................268
Configuring the Certificate Policies Extension ...................................................................................269
Working with Certificates for EncrypTight and the ETKMSs..............................................................272
Generating a Key Pair .................................................................................................................272
Requesting a Certificate ..............................................................................................................273
Importing a CA Certificate ...........................................................................................................274
Importing a CA Certificate Reply .................................................................................................274
Exporting a Certificate .................................................................................................................275
Working with Certificates and an HSM...............................................................................................275
Configuring the HSM for Keytool .................................................................................................275
Importing CA Certificates into the HSM.......................................................................................276
Generating a Key Pair for use with the HSM...............................................................................276
Generating a Certificate Signing Request for the HSM ...............................................................277
Importing Signed Certificates into the HSM.................................................................................277
Working with Certificates for the ETEPs ............................................................................................277
Understanding the Certificate Manager Perspective ...................................................................278
Certificate Manager Workflow .....................................................................................................279
Working with External Certificates...............................................................................................279
Obtaining External Certificates..............................................................................................279
Installing an External Certificate............................................................................................280
Working with Certificate Requests...............................................................................................281
Requesting a Certificate........................................................................................................281
Installing a Signed Certificate................................................................................................283
Viewing a Pending Certificate Request.................................................................................283
Canceling a Pending Certificate Request .............................................................................284
Setting Certificate Request Preferences...............................................................................284
Managing Installed Certificates ...................................................................................................285
Viewing a Certificate .............................................................................................................286
Exporting a Certificate...........................................................................................................286
Deleting a Certificate.............................................................................................................287
Validating Certificates ........................................................................................................................287
Validating Certificates Using CRLs..............................................................................................287
Configuring CRL Usage in EncrypTight and the ETKMSs ..........................................................288
Configuring CRL Usage on ETEPs .............................................................................................288
Handling Revocation Check Failures ..........................................................................................289
Validating Certificates Using OCSP ............................................................................................289
Enabling and Disabling Strict Authentication .....................................................................................292
Removing Certificates........................................................................................................................293
Using a Common Access Card..........................................................................................................294
Configuring User Accounts for Use With Common Access Cards ..............................................295
Enabling Common Access Card Authentication..........................................................................295
Handling Common Name Lookup Failures..................................................................................297
Chapter 21: ETEP Configuration ........................................................................................... 299
Identifying an Appliance.....................................................................................................................300
Product Family and Software Version .........................................................................................300
Appliance Name ..........................................................................................................................300
Throughput Speed.......................................................................................................................301