Black Box ET0010A User Manual

Page of 352
Removing Certificates
EncrypTight User Guide
293
8 Click Put to push the configurations.
9 Click Close to return to the Appliances view, and then refresh the appliance status (Tools > Refresh 
Status). 
NOTE
Strict authentication is available for ETEPs with software version 1.6 and later. 
If you need to remove the ETEP from service and use it elsewhere, you need to disable strict 
authentication and remove all certificates and policies. 
To disable strict authentication: 
1 In the Appliance Manager, right-click on the PEP and select Configuration.
2 In the Configuration editor, click the Features tab.
3 Clear the Enable Strict Client Authentication box.
If certificates expire or if you enable strict authentication before installing certificates, you might not be 
able to communicate with the ETEP from the management workstation. In this case, you can connect a 
serial cable to the ETEP and disable strict authentication from the command line.
To disable strict authentication from the command line:
1 Connect to the serial port of the appliance and open a terminal session.
2 Log in and type 
configure
 to enter configuration mode.
3 Type 
management-interface
 to enter management interface configuration mode.
4 Enter 
strict-client-authentication disable
.
For example: 
admin> configure
Entering configuration mode...
config> management-interface
Entering management interface configuration mode...
man-if> strict-client-authentication disable
For more information about using the 
strict-client-authentication
 command, see the CLI User 
Guide for the ETEP.
Removing Certificates
When you remove all certificates, the appliance regenerates a self-signed certificate. This operation can 
be performed from the EncrypTight software running on the management workstation, or from a 
command line window. For information on using the CLI commands, see the ETEP CLI User Guide.