Security server configuration

Size: px

Start display at page:

Download "Security server configuration"

Sherilyn Owen
10 years ago
Views:

1 csc Security server configuration Security server 5.0x. Version 0.3 pmuhonen 4/15/2014

2 Date Version Description Initial version changed LY-tunnus to Y-tunnus - Section 10 -Producer Registry code format change to FI-<Y-tunnus>-<databaseshortname> Changes to Producer s naming, page 14 Contents 1. Purpose of this document Before you continue Connecting Security Server Web management Logging in, Web interface Adding Central Servers Adding the DNS-key fingerprint Adding CA certificate Running Reconfigure and Tests Adding certificate requests, consumer request Adding certificate requests, Database/Registries request Checking your Security servers registration status

3 1. Purpose of this document This document gives the reader a simplified configuration manual for Xtee Security server 5.0 software configuration. Using steps described in this manual Security server administrator can join his server to Palveluväylä development environment. 2. Before you continue You cannot fully configure Security server before Palveluväylä operator (currently CSC on behalf on VM) has granted your server access to Central servers and monitoring server. To join Palveluväylä development, please send an to [email protected]. In that you should add following information Organization name, address Contact person's name, , mobile number and role in organization Secondary contact person's name, , mobile number and role in organization Y-code (Y-tunnus) or, if private person in question, mobile number Secure server IP address (static IPV4) Joining process in short after you have installed your Secure server Sending joining request with needed information to CSC CSC sending firewall opening confirmation and server keyprints Joining organization: finalizing configuration of Secure server and after that creating and sending key request(s) to CSC CSC sends confirmation that Secure server(s) have been added to Palveluväylä Joining organization checks using their Secure servers web interface that Security server is successfully added to Palveluväylä 3. Connecting Security Server Web management Connection (SSL) to port

4 Select Add Exception Select Confirm Security Exception 4

5 4. Logging in, Web interface Type in webadmin password 5. Adding Central Servers Select Configuration -> Servers. Select Add 5

6 Type in and press Save Press Save once more Changes saved 6

7 Add the second Central Server using the same procedure 6. Adding the DNS-key fingerprint Select Configuration -> Keys and certificates -> DNS keys. Add the DNS-key fingerprint by pressing Add new key and the primary Central Server IP (you ll get the fingerprint from CSC) 7

8 Type in DNS key Fingerprint and Press Save. Failure during saving indicates, that network ports are not open to Central server as needed Remember to press Save second time to finalize changes 8

9 Changes Saved 9

10 7. Adding CA certificate Select Configuration -> Keys and certificates -> CA certificates. Click Add new Type in CA fingerprint (provided by CSC) and press Save 10

11 CA fingerprint added 8. Running Reconfigure and Tests Select Configuration -> Reconfigure all. Click Reconfigure all After successful reconfiguration 11

12 Select System > Diagnostics. Click Test all If all is as supposed, test 9 will fail and the last test was not run 12

9. Adding certificate requests, consumer request That kind of request is made if your organization is consuming resources from Palveluväylä; this is: you are not providing database services, you are

13 9. Adding certificate requests, consumer request That kind of request is made if your organization is consuming resources from Palveluväylä; this is: you are not providing database services, you are consuming those available to your system. Select Configuration -> Organization and click Add Type in Y-tunnus of your organization in Registry code field and the name of your organization in Organization s name field. Click Save 13

Click Save certification request Select Save File and click OK. This certificate request should be sent to pvaylakehitys@csc.

14 Click Save certification request Select Save File and click OK. This certificate request should be sent to (send it as a reply to IP-opening confirmation from CSC) with following information Type of an request: Consumer certreq.gz as an attachment your organization s name that you used when creating certificate request exact registry code (Y-tunnus) that you used when creating certificate request your Security server s IP 10. Adding certificate requests, Database/Registries request That kind of request is made if your organization is providing database services in Palveluväylä development environment 14

15 Select Configuration -> Databases / Registries. Click Add Type in Registry code in format FI-<Y-tunnus>-<databaseshortname>. For example: FI dbtest1 Max total length of Registry code is 20 chars/digits. Type in the name of your organization in Organization s name - databaseshortname field. For example: Organisaatio - dbtest1. Click Save The same Registry code and the same Organization name can exist only once on the same Security server. 15

16 Click Save certification request Select Save File and click OK. This certificate request should be sent to (send it as a reply to IP-opening confirmation from CSC) with following information Type of an request: Producer certreq.gz as an attachment organization s name that you used when creating certificate request exact Reg. code/short Name (FI-Y-tunnus-tietokantanimi) that you used when creating certificate request your Security server s IP 11. Checking your Security servers registration status 16

17 Click Authentication keys Click Load Certificates Click Save Final View 17

Configuring User Identification via Active Directory

Configuring User Identification via Active Directory Version 1.0 PAN-OS 5.0.1 Johan Loos [email protected] User Identification Overview User Identification allows you to create security policies based