22-11-2010, 04:55 PM
if your going to send a PM plz enable PM's so i can reply
The process begins when the cable manufacturer's designated administrator creates a Media Access Controller (MAC) address file, containing the serial numbers and other identifying information of the cable modems requiring certificates, using the VeriSign-supplied Modem Manufacturing Agent (MMA) application.
The administrator sends the MAC file to VeriSign via the MMA, which can be networked to communicate directly with VeriSign. Or the administrator can use VeriSign's convenient, Web-based Managed PKI Control Center to send the files to VeriSign after obtaining them from the MMA. A special "Registration Authority" (RA) certificate digitally signs and encrypts all communications to and from VeriSign.
The Managed PKI system verifies the authenticity of the MAC file by validating the RA signature, and ensures that MAC addresses or serial numbers have not been used before. VeriSign then generates unique public and private key pairs, using dedicated bulk-generation hardware in our secure data center, and incorporates them along with VeriSign's digital signature, into certificates for every modem serial number in the MAC file.
VeriSign inserts the certificates and their private keys into a certificate batch file, and encrypts it with the MMA public key, keeping a copy of the encrypted file. (Only the MMA can decrypt the batch file, using its private key.)
The administrator is notified by an e-mail linking to a secure Web page to download the batch file of certificates. Certificates can be ordered and downloaded as often as needed - daily or weekly.
Using software provided and customized by VeriSign, the MMA unencrypts the batch file and inserts the certificates and private keys into your manufacturing system as the cable modems are manufactured. Your manufacturing system can then burn the certificates and keys into the modems along with the rest of their program and setup information.
http://anish.at.preempted.net/macadd.htm
jackbtw Wrote:do cert on modem only connected to hfc mac? or it connect to many parameters like modem serial number, etc?How does the VeriSign Cable Modem Authentication Service work?
thanks.
The process begins when the cable manufacturer's designated administrator creates a Media Access Controller (MAC) address file, containing the serial numbers and other identifying information of the cable modems requiring certificates, using the VeriSign-supplied Modem Manufacturing Agent (MMA) application.
The administrator sends the MAC file to VeriSign via the MMA, which can be networked to communicate directly with VeriSign. Or the administrator can use VeriSign's convenient, Web-based Managed PKI Control Center to send the files to VeriSign after obtaining them from the MMA. A special "Registration Authority" (RA) certificate digitally signs and encrypts all communications to and from VeriSign.
The Managed PKI system verifies the authenticity of the MAC file by validating the RA signature, and ensures that MAC addresses or serial numbers have not been used before. VeriSign then generates unique public and private key pairs, using dedicated bulk-generation hardware in our secure data center, and incorporates them along with VeriSign's digital signature, into certificates for every modem serial number in the MAC file.
VeriSign inserts the certificates and their private keys into a certificate batch file, and encrypts it with the MMA public key, keeping a copy of the encrypted file. (Only the MMA can decrypt the batch file, using its private key.)
The administrator is notified by an e-mail linking to a secure Web page to download the batch file of certificates. Certificates can be ordered and downloaded as often as needed - daily or weekly.
Using software provided and customized by VeriSign, the MMA unencrypts the batch file and inserts the certificates and private keys into your manufacturing system as the cable modems are manufactured. Your manufacturing system can then burn the certificates and keys into the modems along with the rest of their program and setup information.
http://anish.at.preempted.net/macadd.htm
__________________________________________________________________________________
******new discord chat link https://discord.gg/5BQQbsb*******
******new discord chat link https://discord.gg/5BQQbsb*******