HP FlexNetwork 10500 Series Security Configuration Manual page 255

# Enable client authentication.
[Device-ssl-server-policy-myssl] client-verify enable
[Device-ssl-server-policy-myssl] quit
# Configure the HTTPS service to use SSL server policy myssl.
[Device] ip https ssl-server-policy myssl
# Enable the HTTPS service.
[Device] ip https enable
# Create a local user named usera. Set the password to 123, service type to https, and user
role to network-admin.
[Device] local-user usera
[Device-luser-usera] password simple 123
[Device-luser-usera] service-type https
[Device-luser-usera] authorization-attribute user-role network-admin
3. Request a certificate for the host:
a. Launch IE on the host, and then enter http://10.1.2.2/certsrv in the address bar.
b. Request a client certificate for the host. (Details not shown.)
Verifying the configuration
Perform the following tasks on the host:
1. Launch IE and enter https://10.1.1.1 in the address bar.
2. Select the client certificate issued by the CA server.
The login page of the device should appear.
3. Enter username usera and password 123.
Verify that now you can log in to the Web interface to access and manage the device.
241