Setting up security

Before you can configure IEEE 802.1X properties you need to import to the remote device’s Certificate Manager a client certificate and a CA certificate. The client certificate is used to authenticate the device to the 802.1X port on the network. The CA certificate is used to validate the server that the device is connecting to. The certificates must be imported to the device, prior to configuring the IEEE 802.1X properties.
Prerequisites:
  • You are working in Workbench on a computer that is not on the Internet and is in a physically secure location.
  • You have already obtained from the local IT network administrator a client certificate (with private key password if required) for each JACE/Edge device, and a CA certificate, and saved the certificate *.pem files on the Workbench local file system.
     
    NOTE: Note that the it may not be necessary to have a separate client certificate (i.e. different identity) for each device, you could re-use a client certificate across multiple devices if your local IT network administrator allows that.
     
  • You have platform credentials for the remote device.
  • You have already commissioned the remote device with required software and license feature and rebooted the device.

Perform the following steps:
  1. In Workbench open a platform connection to the remote device and in the Nav Container View, double-click Certificate Management to open the view.
  2. In the Certificate Management view for the device, on the User Key Store tab, click Import.
  3. In the Certificate Import window, navigate to locate the client certificate *.pem file for the device (previously stored locally on the Workbench file system), select the file and click Open.
  4. If prompted for the certificate’s Private Key Password, enter the password and click OK.
     
    NOTE: This step is necessary only if the certificate uses a private key password. If it does not, then you will not be prompted to enter one.
     
  5. When the selected certificate’s properties display in the Certificate Import window, click OK to complete importing the certificate.
    The client certificate is imported to the device’s Key store.
  6. In the Certificate Management view, click the User Trust Store tab, and click Import.
  7. In the Certificate Import window, navigate to locate the CA certificate *.pem file for the device (stored locally on the Workbench file system), select the file and click Open.
  8. When the selected CA certificate’s properties display in the Certificate Import window, click OK to complete importing the certificate.
    The CA certificate is imported to the device’s Trust store.