Changeset 38504 in vbox
- Timestamp:
- Aug 22, 2011 1:26:04 PM (14 years ago)
- svn:sync-xref-src-repo-rev:
- 73622
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/doc/manual/en_US/user_Frontends.xml
r38503 r38504 520 520 means that an external security protocol is used to secure the 521 521 connection. RDP4 and RDP5.1 use Standard RDP Security. 522 VRDP server supports Enhanced RDP Security with TLS protocol and,522 The VRDP server supports Enhanced RDP Security with TLS protocol and, 523 523 as a part of TLS handshake, sends the server certificate to the 524 524 client.</para> … … 527 527 property sets the desired security method, which is used for a 528 528 connection. Valid values are:<itemizedlist> 529 <listitem> 529 <listitem> 530 <para> 530 531 <computeroutput>Negotiate</computeroutput> - both Enhanced (TLS) 531 532 and Standard RDP Security connections are allowed. The security 532 533 method is negotiated with the client. This is the default setting. 533 </listitem> 534 535 <listitem> 534 </para> 535 </listitem> 536 537 <listitem> 538 <para> 536 539 <computeroutput>RDP</computeroutput> - only Standard RDP Security 537 is accepted. 538 </listitem> 539 540 <listitem> 540 is accepted.</para> 541 </listitem> 542 543 <listitem> 544 <para> 541 545 <computeroutput>TLS</computeroutput> - only Enhanced RDP Security 542 is accepted. The client must support TLS. 546 is accepted. The client must support TLS.</para> 543 547 </listitem> 544 548 </itemizedlist> 545 549 For example the following command allows a client to use either Standard 546 550 or Enhanced RDP Security connection: 547 <screen>vboxmanage modifyvm NAME--vrdeproperty "Security/Method=negotiate"</screen>551 <screen>vboxmanage modifyvm "VM name" --vrdeproperty "Security/Method=negotiate"</screen> 548 552 </para> 549 553 … … 557 561 <listitem> 558 562 Create a CA self signed certificate: 559 <screen>openssl req -new -x509 -days 365 -extensions v3_ca -keyout ca_key_private.pem -out ca_cert.pem</screen> 563 <screen>openssl req -new -x509 -days 365 -extensions v3_ca \ 564 -keyout ca_key_private.pem -out ca_cert.pem</screen> 560 565 </listitem> 561 566 … … 568 573 <listitem> 569 574 Generate the server certificate: 570 <screen>openssl x509 -req -days 365 -in server_req.pem -CA ca_cert.pem -CAkey ca_key_private.pem -set_serial 01 -out server_cert.pem</screen> 575 <screen>openssl x509 -req -days 365 -in server_req.pem \ 576 -CA ca_cert.pem -CAkey ca_key_private.pem -set_serial 01 -out server_cert.pem</screen> 571 577 </listitem> 572 578 </orderedlist> 573 579 The server must be configured to access the required files: 574 <screen>vboxmanage modifyvm NAME --vrdeproperty "Security/CACertificate=path/ca_cert.pem"</screen> 575 <screen>vboxmanage modifyvm NAME --vrdeproperty "Security/ServerCertificate=path/server_cert.pem"</screen> 576 <screen>vboxmanage modifyvm NAME --vrdeproperty "Security/ServerPrivateKey=path/server_key_private.pem"</screen> 580 <screen>vboxmanage modifyvm "VM name" \ 581 --vrdeproperty "Security/CACertificate=path/ca_cert.pem"</screen> 582 <screen>vboxmanage modifyvm "VM name" \ 583 --vrdeproperty "Security/ServerCertificate=path/server_cert.pem"</screen> 584 <screen>vboxmanage modifyvm "VM name" \ 585 --vrdeproperty "Security/ServerPrivateKey=path/server_key_private.pem"</screen> 577 586 </para> 578 587 </listitem>
Note:
See TracChangeset
for help on using the changeset viewer.