HP JetAdvantage Security Manager 10 Device E-LTU Manual de usuario descargar pdf (Pagina 24)

to the next publishing of the CRL, Security Manager won’t attempt CRL access. The CDP information

was gleaned from the certificate when it was issued to Security Manager, then cached. These next

steps will demonstrate Security Manager assessment and remediation behavior after the device has

acquired a CA signed identity certificate:

1. The following image shows a snapshot of the CDP information provided in the CA issued

certificate.

2. When the CA signed certificate was issued to Security Manager, the CDP information is collected

from the certificate and a Security Manager attempt is made to access the CRL. The next image is

a network capture showing the Security Manager server (192.168.1.125) requesting the CRL from

the advertised location (192.168.1.100) via HTTP. After acknowledging the request, the CRL is

provided to Security Manager. As long as the CA issued certificate is not in the CRL, the Security

Manager “certificate revocation” assessment will pass.

3. The certificate is then revoked. Even though the certificate has been revoked, the information

hasn’t been updated. The Revocation Status detail in the revoked certificate shows the next update

of the CRL.

1 2 ... 19 20 21 22 23 24 25 26 27 28 29 30 31

Sin comentarios

HP JetAdvantage Security Manager 10 Device E-LTU Manual de usuario Pagina 24