Assign a custom certificate to the https-server

CaoCấp 1Tự độngaruba-cx

Mô tả

The https-server is enabled by default and is assigned the "local-cert" as its server certificate. The "local-cert" is a self-signed certificate generated internally by the switch at first boot. Self-signed certificates generally aren't trusted by browsers and shouldn't be used in normal operation. It is recommended that customers add their own server certificate to the switch and assign it to the https-server. PASS requires a custom certificate assigned to the https-server application. Audited against AOS-CX 'show running-config' output (saved in full); context blocks such as 'password complexity' or 'cli-session' are matched by their indented member lines.

Cách kiểm tra

Phương pháp kiểm tra: Mẫu cấu hình

Mẫu khớp: (?m)^crypto pki application https-server certificate \S+

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

crypto pki application https-server certificate <CERT-NAME> # CIS guidance: The 'crypto pki application' command can be used to assign a certificate to the https- server: crypto pki application https-server certificate <CERT-NAME>

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: aruba-cxcrypto
Tham chiếu: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.9.4 Assign a custom certificate to the https-server

Kiểm tra máy này

Chạy lệnh này trên máy bạn được phép kiểm tra. Lần quét chỉ ở chế độ đọc.

shell

tmaegis scan --target aruba-cx