General Operating Rules And Notes - HP ProCurve 6400cl Series Access Security Manual

Configuring Secure Socket Layer (SSL)

General Operating Rules and Notes

8-6

General Operating Rules and Notes

■ Once you generate a certificate on the switch you should avoid re­
generating the certificate without a compelling reason. Otherwise, you
will have to re-introduce the switch's certificate on all management
stations (clients) you previously set up for SSL access to the switch. In
some situations this can temporarily allow security breaches.
The switch's own public/private certificate key pair and certificate are
■
stored in the switch's flash memory and are not affected by reboots or the
erase startup-config command
■ The public/private certificate key pair is not be confused with the SSH
public/private key pair. The certificate key pair and the SSH key pair are
independent of each other, which means a switch can have two keys pairs
stored in flash
■ When stacking is enabled, SSL provides security only between an SSL
client and a stack commander running SSL. Communications between the
stack commander and stack members is not secure. (This operation
applies to ProCurve Series 3400cl and 6400cl switches. Stacking is not
available on the Series 5300xl switches.)