
Enterprise Server Installation and Migration Guide 49
HKLM\System\CurrentControlSet\Services\CredMgmtAgent\Parameters\DisableSSLCertTrust (DWORD (32-bit) Value)=1
Disabling trust validation lessens security, but allows you to use a self-signed certificate for pilots, POCs, etc.
For a
production environment, Dell recommends public CA-signed or domain-signed certificates.
– Workstations running the web browser version of the Silverlight Console:
•Insert the “Root Agency” signing certificate (from Intermediate Certification Authorities) into the workstation’s “Trusted
Root Certification Authorities” (for “local computer”) in the Microsoft keystore.
There are two methods to create a certificate – Express and Advanced.
Choose
one
method:
• Express – Choose this method to generate a self-signed certificate for all components. This is the easiest method.
• Advanced – Choose this method to configure each component separately.
Express
a
From the top menu, select
Actions
>
Configure Certificates
.
b
When the Configuration Wizard launches, select
Express
and click
Next
. The information from the self-signed certificate
that was created when installing the Enterprise Server will be used, if available.
c
From the top menu, select
Configuration
>
Save
. If prompted, confirm the save.
Certficate set up is complete. The rest of this section details the Advanced method of creating a certificate and may be
ignored.
If your deployment includes Dell Manager, continue to step 8 on page 50.
If your deployment does
not
include Dell Manager, continue to step 9 on page 51.
Advanced
There are two paths to create a certificate – Generate Self-Signed Certificate and Use Current Settings. Choose
one
path:
• Path 1 – Generate Self-Signed Certificate
• Path 2 – Use Current Settings
Path 1 – Generate Self-Signed Certificate
a
From the top menu, select
Actions
>
Configure Certificates
.
b
When the Configuration Wizard launches, select
Advanced
and click
Next
.
c
Select
Generate Self-Signed Certificate
and click
Next
. The information from the self-signed certificate that was
created when installing the Enterprise Server will be used, if available.
d
From the top menu, select
Configuration
>
Save
. If prompted, confirm the save.
Certficate set up is complete. The rest of this section details the other method of creating a certificate and may be
ignored.
If your deployment includes Dell Manager, continue to step 8 on page 50.
If your deployment does
not
include Dell Manager, continue to step 9 on page 51.
Path 2 – Use Current Settings
a
From the top menu, select
Actions
>
Configure Certificates
.
b
When the Configuration Wizard launches, select
Advanced
and click
Next
.
c
Select
Use Current Settings
and click
Next
.
d
At the Compatibility Server SSL Certificate window, select
Generate Self-Signed Certificate
and click
Next
. The
information from the self-signed certificate that was created when installing the Enterprise Server will be used, if
available.
Click
Next
.
e
At the Core Server SSL Certificate window, select one of the following:
– Select Certificate – Select this option to use an existing certificate. Click
Next
.
Comentários a estes Manuais