web-manager security server-certificate

Function

The web-manager security server-certificate command specifies a certificate used for HTTPS login.

The undo web-manager security server-certificate command restores the default certificate used for HTTPS login.

Format

web-manager security server-certificate file-name

undo web-manager security server-certificate

Parameters

Parameter	Description	Value
file-name	Specifies the name of a certificate.	The value is a string of 1 to 64 characters.

Views

System view

Default Level

3: Management level

Usage Guidelines

By default, when a client uses HTTPS to attempt to log in to a FW server, the FW delivers a default certificate to the PC. The certificate is assigned by an unknown Certificate Authority (CA). The PC does not trust the certificate though cannot verify it, which causes the PC to be vulnerable to attacks.

The FW must have certificates and RSA key files, and CA certificates must be imported into the client to verify the certificates delivered by the FW.

Example

# Specify a certificate file named server.cer for a PC (client) that uses HTTPS to log in to a FW.

<sysname> system-view
[sysname] web-manager security server-certificate server.cer