TechLibrary

Navigation Back up to About Overview

ContentIndex

[+] Expand All

[-] Collapse All

Junos OS Release 12.3X48 Feature Guide
- New Features in Junos OS Release 12.3X48-D30
  - Integrated ClearPass Authentication and Enforcement
    - Understanding SRX Series Integrated ClearPass Authentication and Its Component Functions
      - Understanding the SRX Series Integrated ClearPass Authentication and Enforcement Feature
        Why You Need to Protect Your Environment With the SRX Series Integrated ClearPass Authentication and Enforcement Feature
        How the SRX Series Integrated ClearPass Authentication and Enforcement Feature Can Protect Your Network Environment
      - SRX Series Supported Platforms for the Integrated ClearPass Authentication and Enforcement Feature
      - Understanding How ClearPass Initiates a Session and Communicates User Authentication Information to the SRX Series Device Using the Web API
        Web API
        ClearPass Authentication Table
        Using HTTPS or HTTP for the Connection Protocol Between ClearPass and the SRX Series Device
        Ensuring the Integrity of Data Sent from ClearPass to the SRX Series Device
        Data Size Restrictions and Other Constraints
        Posture States and the Posture Group
      - Understanding Enforcement of ClearPass User and Group Authentication on the SRX Series Devices
        Understanding How the SRX Series Device Manages the ClearPass Authentication Table
        User Authentication Entries in the ClearPass Authentication Table
        Communication Between ClearPass and the SRX Series Device
        Understanding Domains and Interested Groups
        When a User Has Already Been Authenticated By Another Source
      - Understanding the Integrated ClearPass Authentication and Enforcement User Query Function
      - Understanding How the Integrated ClearPass Feature Detects Threats and Attacks and Notifies the CPPM
      - SRX Series Threat and Attack Logs Sent to Aruba ClearPass
    - Integrated ClearPass Authentication and Enforcement Examples
    - Integrated ClearPass Authentication and Enforcement CLI Configuration Statements
    - Integrated ClearPass Authentication and Enforcement CLI Operational Commands
- New Features in Junos OS Release 12.3X48-D20
- New Features in Junos OS Release 12.3X48-D15
- Requesting Technical Support
- Revision History

No index entries found.

Download This Guide

Download this guide: Junos OS Release 12.3X48 Feature Guide

certficate (System Services)

Syntax

certificate certificate-filename;

Hierarchy Level

[edit system services webapi https]

Release Information

Statement introduced in Junos OS Release 12.3X48-D30.

Description

Configure a custom certificate. A certificate is required when HTTPS is used for the Web API function (webapi), which allows the ClearPass Policy Manager (CPPM) to initiate a connection to the SRX Series device.

The Web API daemon (webapi), which acts as an HTTP or HTTPS server, allows the CPPM, acting as a client, to send user authentication and identity information to the SRX Series device. The Web API function is part of the integrated ClearPass authentication and enforcement feature that uses Aruba ClearPass as its authentication source.

When you configure the Web API daemon to use HTTPS, you can use the default certificate, a custom one, or a certificate generated by the public key infrastructure (PKI) local store.

If you configure a custom certificate, you must configure a certificate key with it. Here is an example of how to configure a certificate and certificate key:

set system services webapi https certificate /var/tmp/certificate.crt set system services webapi https certificate-key /var/tmp/certificate.key

Note: The Web API function supports only the Privacy-Enhanced Mail (PEM) format for the custom certificate and certificate key.

Required Privilege Level

system—To view this statement in the configuration.
system-control—To add this statement to the configuration.