Modify HTTPS Settings

HTTPS (Hypertext Transfer Protocol over Secure Sockets Layer) is a protocol for transferring private documents over the Internet. PacketWise is automatically configured to run HTTP over SSL on port 443 but you can select a different listening port. In addition, if you believe the certificate's security was compromised, you can generate a new digital certificate.

Note: To perform this task from PolicyCenter, you must first select a configuration from the Editing Configuration drop-down list at the top of the page.

Changing the HTTPS Port Number

1. Click the setup tab.

2. From the Choose Setup Page list, select HTTPS. The HTTP over SSL settings appear on the Setup screen.  show screen

3. Enter the new port number in the HTTPS Port field.

4. Click apply changes to update the settings.

Generating a New Digital Certificate in Internet Explorer

1. Click the setup tab.

2. From the Choose Setup Page list, select HTTPS. The HTTP over SSL settings appear on the Setup screen.  show screen

3. Click generate a new certificate.

4. Click OK to confirm.

Generating a New Digital Certificate in Netscape 7.x

Netscape browsers require that you delete the existing certificate authority before you generate a new certificate. To delete the certificate for your PacketShaper:

1. In Netscape 7.x, select Edit > Preferences.

2. In the Privacy & Security category, choose Certificates.

3. Click Manage Certificates.

4. Select the Authorities tab.

5. Select the certificate name (the IP address for your PacketShaper) and click Delete.

6. Close the windows.

7. Log into your PacketShaper.

8. Click the setup tab.

9. From the Choose Setup Page list, select HTTPS. The HTTP over SSL settings appear on the Setup screen.  show screen

10. Click generate a new certificate.

11. Click OK to confirm.

After a moment, the output of the encryption algorithm appears in the Certificate Information section. The thumbprinting/fingerprinting mechanism makes sure that you are contacting the intended remote host. The thumbprint, a sequence of 20 bytes in hexadecimal separated by colons, uses the SHA1 algorithm and is used by Internet Explorer. The fingerprint, a sequence of 16 bytes, uses the MD5 algorithm and is used by Netscape browsers. For information about verifying the certificate, see Secure Logins.

12. Close the Netscape window.

13. Log in with a secure connection.

14. In the Website Certified by an Unknown Authority window, choose Accept this certificate permanently and click OK.

See also:

Security Alert