23.0 Certificate Management

By default, all SUSE Linux Enterprise Server (SLES) servers include self-generated server certificates to secure data communications with the servers. These certificates are self-signed and do not comply with the X.509 RFCs. They are provided only as a stop-gap and should be replaced as soon as possible by a certificate from a trusted Certificate Authority.

Unfortunately, many organizations ignore the vulnerabilities to mischievous or even malicious attacks that are created by not replacing these temporary certificates. Some of the reasons for this are

The problems are compounded by the fact that X.509 certificates are designed to expire regularly and should be replaced shortly before they do.

Open Enterprise Server 11 includes solutions that address each of these issues at no additional expense.

This section discusses the certificate management enhancements available in OES and how simple and straightforward it is to utilize them.