Cisco Cisco Web Security Appliance S170 사용자 가이드
22-28
AsyncOS 9.1.1 for Cisco Web Security Appliances User Guide
Chapter 22 Perform System Administration Tasks
AsyncOS for Web Upgrades and Updates
Once the CSR has been generated, submit it to a certificate authority (CA). The CA will return the
certificate in PEM format.
certificate in PEM format.
If you are acquiring a certificate for the first time, search the Internet for “certificate authority services
SSL server certificates,” and choose the service that best meets the needs of your organization. Follow
the service’s instructions for obtaining an SSL certificate.
SSL server certificates,” and choose the service that best meets the needs of your organization. Follow
the service’s instructions for obtaining an SSL certificate.
Note
You can also generate and sign your own certificate. Tools for doing this are included with OpenSSL,
free software from
free software from
http://www.openssl.org
.
Intermediate Certificates
In addition to root certificate authority (CA) certificate verification, AsyncOS supports the use of
intermediate certificate verification. Intermediate certificates are certificates issued by a trusted root CA
which are then used to create additional certificates. This creates a chained line of trust. For example, a
certificate may be issued by example.com who, in turn, is granted the rights to issue certificates by a
trusted root CA. The certificate issued by example.com must be validated against example.com’s private
key as well as the trusted root CA’s private key.
intermediate certificate verification. Intermediate certificates are certificates issued by a trusted root CA
which are then used to create additional certificates. This creates a chained line of trust. For example, a
certificate may be issued by example.com who, in turn, is granted the rights to issue certificates by a
trusted root CA. The certificate issued by example.com must be validated against example.com’s private
key as well as the trusted root CA’s private key.
AsyncOS for Web Upgrades and Updates
Cisco periodically releases upgrades (new software versions) and updates (changes to current software
versions) for AsyncOS for Web and its components.
versions) for AsyncOS for Web and its components.
occur
Best Practices For Upgrading AsyncOS for Web
•
Before you start the upgrade, save the XML configuration file off the Web Security appliance from
the System Administration > Configuration File page or by using the
the System Administration > Configuration File page or by using the
saveconfig
command.
•
Save other files stored on the appliance, such as PAC files or customized end-user notification pages.
•
When upgrading, do not pause for long amounts of time at the various prompts. If the TCP session
times out during the download, the upgrade may fail.
times out during the download, the upgrade may fail.
•
After the upgrade completes, save the configuration information to an XML file.
Related Topics
•
Upgrading and Updating AsyncOS and Security Service Components
Upgrading AsyncOS for Web
Before You Begin
•
Save the appliance configuration file (see
).