ECDSA 521 and Chrome

Issue:
NMC3 devices with an ECDSA 521 key cannot be launched to, over the web, through a Google Chrome web browser.

Product Line:
All NMC3 enabled devices

Cause:
The Google Chrome web browser is incompatible with the SSL certificates using ECDSA 521 encryption.

Resolution:
There are multiple options to resolve this issue.

1. Switch to a different web browser (ex. Mozilla Firefox).
2. Choose a different ECDSA encryption – both 256 and 384 are supported on the NMC3
   • To change encryption, log into the device with SSH and run one of the following commands: ssl key -ecdsa 256 OR ssl key -ecdsa 384
3. Use RSA instead of ECDSA.  The NMC3 supports RSA 1024, 2048, and 4096.
   • To use RSA encryption, the corresponding CLI commands are ssl key -rsa 1024 OR ssl key -rsa2048 OR ssl key -rsa 4096

Publié pour:Schneider Electric Belgium