<!DOCTYPE html
SYSTEM "about:legacy-compat">
<html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta charset="UTF-8"><meta name="copyright" content="(C) Copyright 2023"><meta name="DC.rights.owner" content="(C) Copyright 2023"><meta name="DC.type" content="task"><meta name="DC.relation" scheme="URI" content="#task_f24_tv5_1v"><meta name="DC.relation" scheme="URI" content="#task_rx5_ww5_1v"><meta name="DC.relation" scheme="URI" content="#task_q3r_kxx_bv"><meta name="DC.relation" scheme="URI" content="#task_q2m_v1v_1v"><meta name="DC.relation" scheme="URI" content="#task_hsf_5bv_1v"><meta name="DC.relation" scheme="URI" content="#task_hsf_5bv_1v"><meta name="DC.relation" scheme="URI" content="#task_hsf_5bv_1v"><meta name="DC.relation" scheme="URI" content="#task_fqx_v1m_ls"><meta name="DC.relation" scheme="URI" content="#unique_145355702251324881"><meta name="prodname" content="For All Mediatrix Units"><meta name="version" content="DGW 49.12.28842941"><meta name="platform" content="All"><meta name="DC.date.modified" content="2023-0308-2809"><meta name="DC.date.issued" content="2023-0308-2809"><meta name="DC.date.available" content="2023-0308-2809"><meta name="ChapterNumbering" content="no"><meta name="DC.format" content="HTML5"><meta name="DC.identifier" content="task_zyc_vrn_1v"><link href="https://fonts.googleapis.com/css?family=Open+Sans" rel="stylesheet"><link rel="stylesheet" type="text/css" href="https://documentation.media5corp.com/download/attachments/45482024/commonltr.css"><link rel="stylesheet" type="text/css" href="https://documentation.media5corp.com/download/attachments/45482024/custom.css"><title>Creating a Media5 Device Host Certificate with OpenSSL</title></head><body><header role="banner"><div class="topicmeta title">Creating a Media5 Device Host Certificate with OpenSSL</div><div class="topicmeta date">2023-0308-28<09</div><div class="topicmeta product">For All Mediatrix Units</div><div class="topicmeta version">DGW 49.12.2884<2941</div><div class="topicmeta pdf"><a href="https://documentation.media5corp.com/download/attachments/45482024/Creating%20a%20Media5%20Device%20Host%20Certificate%20with%20OpenSSL.pdf" rel="nofollow">Download PDF Document</a></div><hr><span style="float: inline-end;"></span></header><nav role="toc"><ul><li><a href="#task_zyc_vrn_1v">Generating a Private Key</a></li><li><a href="#task_f24_tv5_1v">Creating a Certificate Signing Request (CSR) from a Private Key</a></li><li><a href="#task_rx5_ww5_1v">Signing the CSR file by Your Own Certificate Authority (CA)</a></li><li><a href="#task_q3r_kxx_bv">Signing the CSR by a Third Party Certificate Authority (CA)</a></li><li><a href="#task_q2m_v1v_1v">Self-signing the CSR File</a></li><li><a href="#task_hsf_5bv_1v">Combining the Private Key and the Signed Certificate</a></li><li><a href="#task_fqx_v1m_ls">Importing a Host Certificate through the Web Page</a></li><li><a href="#unique_145355702251324881">Importing any Certificate through a Configuration Script</a></li><li><a href="#reference_j4g_nbv_gfb">Online Help</a></li><li><a href="#concept_v4k_q3h_1r">DGW Documentation</a></li><li><a href="#concept_fqm_rv4_k4">Copyright Notice</a></li></ul></nav><main role="main"><article role="article" aria-labelledby="ariaid-title1"><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="nested0" aria-labelledby="ariaid-title1" id="task_zyc_vrn_1v">
<h1 class="title topictitle1" id="ariaid-title1">Generating a Private Key</h1>
<div class="body taskbody">
<section><div class="tasklabel"><strong class="sectiontitle tasklabel">Steps</strong></div><ol class="ol steps"><li class="li step stepexpand">
<span class="ph cmd">Enter <span class="keyword wintitle">openssl genrsa -aes256 -out your_device.key
2048</span></span>
<div class="itemgroup info">
<div class="note note note_note"><span class="note__title">Note:</span> The following step is optional.</div>
</div>
</li><li class="li step stepexpand">
<span class="ph cmd">Enter <span class="keyword wintitle">cp your_device.key your_device.key.orig</span></span>
</li><li class="li step stepexpand">
<span class="ph cmd">Enter <span class="keyword wintitle">openssl rsa -in your_device.key.orig -out
your_device.key</span> to remove the passphrase.</span>
<div class="itemgroup info">Example<pre class="pre codeblock"><code>[root@localhost mycert]# cp 192.168.1.31.key 192.168.1.31.key.orig
[root@localhost mycert]# openssl rsa -in 192.168.1.31.key.orig -out 192.168.1.31.key
Enter pass phrase for 192.168.1.31.key.orig:
writing RSA key
[root@localhost mycert]#</code></pre></div>
</li></ol></section>
<section class="section result"><div class="tasklabel"><strong class="sectiontitle tasklabel">Result</strong></div>A private key is generated with:<ul class="ul" id="task_zyc_vrn_1v__ul_itd_3vx_bv">
<li class="li">a length of 2048 bits</li>
<li class="li">encryption with a 256 bit AES algorithm. </li>
</ul><p class="p">The output filename is your_device.key.</p></section>
</div>
<nav role="navigation" class="related-links"><div class="linklist relinfo reltasks"><div class="linklistlabel"><strong class="sectiontitle linklistlabel">Next Step</strong></div><ul class="linklist"><li class="linklist"><a class="link" href="#task_f24_tv5_1v">Creating a Certificate Signing Request (CSR) from a Private Key</a></li></ul></div></nav></article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic task nested0" aria-labelledby="ariaid-title2" id="task_f24_tv5_1v">
<h1 class="title topictitle1" id="ariaid-title2">Creating a Certificate Signing Request (CSR) from a Private Key</h1>
<div class="body taskbody">
<section><div class="tasklabel"><strong class="sectiontitle tasklabel">Steps</strong></div><div class="li step p">
<span class="ph cmd">Enter <span class="keyword wintitle">openssl req -new -key your_device.key -out your_device.csr
-sha256</span></span>
</div></section>
<section class="section result"><div class="tasklabel"><strong class="sectiontitle tasklabel">Result</strong></div>
<p class="p">A CSR is generated from the private key created in the <a class="xref" href="#task_zyc_vrn_1v">Generating a Private Key</a> procedure with a SHA256
signature algorithm. This is a result example.</p>
<div class="p">
<pre class="pre codeblock"><code>[root@localhost mycert]# openssl req -new -key 192.168.1.31.key -out 192.168.1.31.csr -sha256
Enter pass phrase for 192.168.1.31.key:
You are about to be asked to enter information that will be incorporatedinto your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blankFor some fields there will be a defaultvalue,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code)[XX]:CA
State or Province Name (full name[]:Quebec
Locality Name (eg, city) [Default City]:Montreal
Organization Name (eg, company) [Default Company Ltd]:Media5
Organizational Unit Name (eg,section)[]:TAC
Common Name (eg, your name or your server's hostname)[]:192.168.1.31
Email Address[]:tac@media5corp.com
Please enter the following 'extra'attributes
to be sent with your certificate request
A challenge password []
:An optional company name []:
[root@localhost mycert]#</code></pre>
</div>
</section>
</div>
<nav role="navigation" class="related-links"><div class="linklist relinfo reltasks"><div class="linklistlabel"><strong class="sectiontitle linklistlabel">Next Step</strong></div><ul class="linklist"><li class="linklist"><a class="link" href="#task_rx5_ww5_1v" title="Use this procedure if your certificates are signed by a Certificate Authority you have access to.">Signing the CSR file by Your Own Certificate Authority (CA)</a></li><li class="linklist"><a class="link" href="#task_q3r_kxx_bv" title="Use this procedure if your certificates are signed by a Certificate Authority you do not have access to.">Signing the CSR by a Third Party Certificate Authority (CA)</a></li><li class="linklist"><a class="link" href="#task_q2m_v1v_1v" title="Use this procedure if your certificates are self-signed, i.e. security is not an issue.">Self-signing the CSR File</a></li></ul></div></nav></article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic task nested0" aria-labelledby="ariaid-title3" id="task_rx5_ww5_1v">
<h1 class="title topictitle1" id="ariaid-title3">Signing the CSR file by Your Own Certificate Authority (CA)</h1>
<div class="body taskbody"><p class="shortdesc">Use this procedure if your certificates are signed by a Certificate Authority you
have access to.</p>
<section><div class="tasklabel"><strong class="sectiontitle tasklabel">Steps</strong></div><div class="li step p">
<span class="ph cmd">Enter <span class="keyword wintitle">openssl x509 -req -extfile host_ext.cnf -extensions host_ext
-sha256 -days 3652 -in your_device.csr -CA CA.crt -CAkey CA.key -CAserial
CA.srl -out your_device.crt</span></span>
<div class="itemgroup info">
<div class="note note note_note"><span class="note__title">Note:</span>
<ul class="ul" id="task_rx5_ww5_1v__ul_gbl_ky5_1v">
<li class="li"><span class="keyword wintitle">CA.key</span> is the private key of your CA </li>
<li class="li"><span class="keyword wintitle">CA.crt </span>is the CA’s public certificate </li>
<li class="li"><span class="keyword wintitle">CA.srl</span> is the serial number file</li>
<li class="li">3652 days is the validity period of the certificate </li>
<li class="li"><span class="keyword wintitle">host_ext.cnf</span> defines the usage of the
certificate. It
contains:<pre class="pre codeblock"><code>[ host_ext ]
basicConstraints = CA:false
keyUsage = digitalSignature, keyEncipherment, dataEncipherment
extendedKeyUsage = serverAuth, clientAuth</code></pre>
</li>
</ul>
</div>
</div>
</div></section>
<section class="section result"><div class="tasklabel"><strong class="sectiontitle tasklabel">Result</strong></div>This is a result example.
<pre class="pre codeblock"><code>[root@localhost mycert]# openssl x509 -req -extfile host_ext.cnf -extensions host_ext -sha256 -days
3652 -in 192.168.1.31.csr -CA CA.crt -CAkey CA.key -CAserial CA.srl -out 192.168.1.31.crt
Signature ok
subject=/C=CA/ST=Quebec/L=Montreal/O=Media5/OU=TAC/CN=192.168.1.31/emailAddress=tac@media5corp.com
Getting CA Private Key
Enter pass phrase for CA.key:
root@localhost mycert]#</code></pre>When
the certificate will be imported to the Mediatrix unit, the information defined for the
keyUSage of the host_ext.cnf file will be displayed in <span class="keyword wintitle">Management</span>><span class="keyword wintitle">Certificates</span>/<span class="keyword wintitle">Host Certificates</span> table, under the
<span class="keyword wintitle">Usage</span> column.</section>
</div>
<nav role="navigation" class="related-links"><div class="linklist relinfo reltasks"><div class="linklistlabel"><strong class="sectiontitle linklistlabel">Next Step</strong></div><ul class="linklist"><li class="linklist"><a class="link" href="#task_hsf_5bv_1v">Combining the Private Key and the Signed Certificate</a></li></ul></div></nav></article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic task nested0" aria-labelledby="ariaid-title4" id="task_q3r_kxx_bv">
<h1 class="title topictitle1" id="ariaid-title4">Signing the CSR by a Third Party Certificate Authority (CA)</h1>
<div class="body taskbody"><p class="shortdesc"> Use this procedure if your certificates are signed by a Certificate Authority you do
not have access to. </p>
<section><div class="tasklabel"><strong class="sectiontitle tasklabel">Steps</strong></div><div class="li step p">
<span class="ph cmd">Send your CSR to the Third Party Certificate Authority agency responsible for
signing your Certificate Signing Request.</span>
<div class="itemgroup info">
<div class="note note note_note"><span class="note__title">Note:</span> VeriSign or Entrust are examples of Third Party Certificate Authority
Agencies.</div>
</div>
</div></section>
</div>
<nav role="navigation" class="related-links"><div class="linklist relinfo reltasks"><div class="linklistlabel"><strong class="sectiontitle linklistlabel">Next Step</strong></div><ul class="linklist"><li class="linklist"><a class="link" href="#task_hsf_5bv_1v">Combining the Private Key and the Signed Certificate</a></li></ul></div></nav></article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic task nested0" aria-labelledby="ariaid-title5" id="task_q2m_v1v_1v">
<h1 class="title topictitle1" id="ariaid-title5">Self-signing the CSR File</h1>
<div class="body taskbody"><p class="shortdesc">Use this procedure if your certificates are self-signed, i.e. security is not an
issue.</p>
<section><div class="tasklabel"><strong class="sectiontitle tasklabel">Steps</strong></div><div class="li step p">
<span class="ph cmd">Enter <span class="ph"><span class="keyword wintitle">openssl x509 -req -extfile host_ext.cnf -extensions
host_ext -sha256 -days 3652 -in your_device.csr -signkey your_device.key
-out your_device.crt</span></span></span>
<div class="itemgroup info">
<div class="note important note_important"><span class="note__title">IMPORTANT:</span> The command must be entered on a single line, otherwise
it will not work. </div>
</div>
<div class="itemgroup info">
<div class="note note note_note"><span class="note__title">Note:</span>
<p class="p"><span class="keyword wintitle">host_ext.cnf</span> is a file containing the following
which defines the usage of the certificate: </p>
<pre class="pre codeblock"><code>[ host_ext ]
basicConstraints = CA:false
keyUsage = digitalSignature, keyEncipherment,dataEncipherment
extendedKeyUsage = serverAuth, clientAuth</code></pre>
</div>
</div>
</div></section>
</div>
<nav role="navigation" class="related-links"><div class="linklist relinfo reltasks"><div class="linklistlabel"><strong class="sectiontitle linklistlabel">Next Step</strong></div><ul class="linklist"><li class="linklist"><a class="link" href="#task_hsf_5bv_1v">Combining the Private Key and the Signed Certificate</a></li></ul></div></nav></article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic task nested0" aria-labelledby="ariaid-title6" id="task_hsf_5bv_1v">
<h1 class="title topictitle1" id="ariaid-title6">Combining the Private Key and the Signed Certificate</h1>
<div class="body taskbody">
<section class="section context"><div class="tasklabel"><strong class="sectiontitle tasklabel">Context</strong></div>
<p class="p">The host certificate required by the Mediatrix contains two parts: the private key
and the signed certificate.</p>
</section>
<section><div class="tasklabel"><strong class="sectiontitle tasklabel">Steps</strong></div><div class="li step p">
<span class="ph cmd">Enter <span class="keyword wintitle">cat your_device.key your_device.crt >
your_device.pem</span></span>
</div></section>
<section class="section result"><div class="tasklabel"><strong class="sectiontitle tasklabel">Result</strong></div>This is a result
example:<pre class="pre codeblock"><code>[root@localhost mycert]# cat 192.168.1.31.key 192.168.1.31.crt > 192.168.1.31.pem
[root@localhost mycert]# more 192.168.1.31.pem
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----</code></pre>
</section>
</div>
<nav role="navigation" class="related-links"><div class="linklist relinfo reltasks"><div class="linklistlabel"><strong class="sectiontitle linklistlabel">Next Step</strong></div><ul class="linklist"><li class="linklist"><a class="link" href="#task_fqx_v1m_ls">Importing a Host Certificate through the Web Page</a></li><li class="linklist"><a class="link" href="#unique_145355702251324881">Importing any Certificate through a Configuration Script</a></li></ul></div></nav></article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic task nested0" aria-labelledby="ariaid-title7" id="task_fqx_v1m_ls">
<h1 class="title topictitle1" id="ariaid-title7">Importing a Host Certificate through the Web Page</h1>
<div class="body taskbody">
<section class="section prereq"><div class="tasklabel"><strong class="sectiontitle tasklabel">Before you begin</strong></div>You must have an SNTP server for current date and time.</section>
<section><div class="tasklabel"><strong class="sectiontitle tasklabel">Steps</strong></div><ol class="ol steps"><li class="li step stepexpand">
<span class="ph cmd">Go to <span class="keyword wintitle">Management</span>/<span class="keyword wintitle">Certificates</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">Click <span class="keyword wintitle">Activate unsecure certificate
transfer</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">From the <span class="keyword wintitle">Type</span>
selection list, select <span class="keyword wintitle">Host</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">Click <span class="keyword wintitle">Browse</span> and
select the Host certificate.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">Click <span class="keyword wintitle">Apply</span></span>
</li><li class="li step stepexpand">
<span class="ph cmd">In the <span class="keyword wintitle">Host Certificate Associations</span>
table, select the services that Host Certificate should be associated
with.</span>
<div class="itemgroup info">
<div class="note note note_note"><span class="note__title">Note:</span> A Host certificate is by default associated with all services. Several
Host Certificates can be imported and associated with one or several
services.</div>
</div>
</li><li class="li step stepexpand">
<span class="ph cmd">Click <span class="keyword wintitle">Import</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">Click <span class="keyword wintitle">Apply</span>. </span>
</li></ol></section>
<section class="section result"><div class="tasklabel"><strong class="sectiontitle tasklabel">Result</strong></div>This is an example of the result of a Host Certificate imported and associated with
all services.
<br><img class="image" id="task_fqx_v1m_ls__image_ash_jhw_1v" src="https://documentation.media5corp.com/download/attachments/45482024/Certificates_HostCertificateImport.png" width="800"><br></section>
</div>
</article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic task nested0" aria-labelledby="ariaid-title8" id="unique_145355702251324881">
<h1 class="title topictitle1" id="ariaid-title8">Importing any Certificate through a Configuration Script</h1>
<div class="body taskbody">
<section class="section context"><div class="tasklabel"><strong class="sectiontitle tasklabel">Context</strong></div>
<p class="p">To use the <span class="keyword cmdname">Cert.InstallCertificate</span> command, the provided content
must be a valid certificate file encoded in Base64.</p>
<p class="p">Under Linux system: <code class="ph codeph">base64 --wrap=0 myCertificate.crt >
myBase64File.txt</code></p>
<p class="p">With OpenSSL tool: <code class="ph codeph">openssl base64 -A -in myCertificate.crt -out
myBase64File.txt</code></p>
</section>
<section><div class="tasklabel"><strong class="sectiontitle tasklabel">Steps</strong></div><ol class="ol steps"><li class="li step stepexpand">
<span class="ph cmd">Prepare the configuration script file with the wanted
<span class="keyword cmdname">Cert.InstallCertificate</span> command line to execute.</span>
<div class="itemgroup info">
<div class="note important note_important"><span class="note__title">IMPORTANT:</span> The <var class="keyword varname">FileContent</var> argument requires the
Base64 encoding of the whole certificate file, including the portions that
may be already in Base64.</div>
<div class="note important note_important"><span class="note__title">IMPORTANT:</span> Double quotes must be used around the Base64 value of the
<var class="keyword varname">FileContent</var> argument.</div>
</div>
<div class="itemgroup stepxmp">
<pre class="pre codeblock"><code>Cert.InstallCertificate
Name="MyCertificate.crt" Type="Host"
FileContent="LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQ
pNSUlFb3dJQkFBS0NBUUVBdXhLRE82Nm9LT2lnY0hRMXIxbG5YTGlRVD
lSMG9Ra0UvcHBPRG85dlhaVnNjOEQ2CnV5RmxkUm9E...RESUtRNUt2V
HYKK2lMZ1FMczltakhBVXJ1TlY5K0pKeDFzcHY4RlpwMD0KLS0tLS1FT
kQgQ0VSVElGSUNBVEUtLS0tLQ=="</code></pre>
</div>
<div class="itemgroup info">
<div class="note note note_note"><span class="note__title">Note:</span> For more details about the <span class="keyword cmdname">Cert.InstallCertificate</span>
command, refer to the <a class="xref" href="https://documentation.media5corp.com/display/DGWLATEST/Reference+Guide" target="_blank">DGW Configuration Guide - Reference
Guide</a> published on the <a class="xref" href="https://documentation.media5corp.com/" target="_blank">Media5 Documentation Portal</a>.</div>
</div>
<div class="itemgroup info">
<div class="note note note_note"><span class="note__title">Note:</span> For more details on size limitation with configuration script file, refer
to the <a class="xref" href="https://documentation.media5corp.com/display/DGWLATEST/Limitations+of+DGW+Platforms" target="_blank">DGW Configuration Guide - Limitations of
DGW Platforms</a> document published on the <a class="xref" href="http://documentation.media5corp.com" target="_blank">Media5 Documentation Portal</a></div>
</div>
</li><li class="li step stepexpand">
<span class="ph cmd">Go to <span class="keyword wintitle">Management</span>/<span class="keyword wintitle">Configuration Scripts</span>/<span class="keyword wintitle">Execute</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">If you are not using HTTPS, click <span class="keyword wintitle">Activate unsecure
file importation from the Web browser</span>. </span>
</li><li class="li step stepexpand">
<span class="ph cmd">In the <span class="keyword wintitle">Upload Script Through Web Browser</span> table, browse to the location of the file you wish to import. </span>
</li><li class="li step stepexpand">
<span class="ph cmd">Click <span class="keyword wintitle">Upload and Execute</span>.</span>
</li></ol></section>
<section class="section result"><div class="tasklabel"><strong class="sectiontitle tasklabel">Result</strong></div>The certificate will be inserted in the <span class="keyword wintitle">Management</span>/<span class="keyword wintitle">Certificates</span> page.</section>
</div>
</article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic reference nested0" aria-labelledby="ariaid-title9" id="reference_j4g_nbv_gfb">
<h1 class="title topictitle1" id="ariaid-title9">Online Help</h1>
<p class="shortdesc"><span class="ph">If you are not familiar with the meaning of the fields and
buttons, click <span class="keyword wintitle">Show Help</span>, located at the upper right corner of
the Web page. When activated, the fields and buttons that offer online help will
change to green and if you hover over them, the description will bedisplayed.</span></p>
</article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic concept nested0" aria-labelledby="ariaid-title10" id="concept_v4k_q3h_1r">
<h1 class="title topictitle1" id="ariaid-title10">DGW Documentation</h1>
<div class="body conbody"><p class="shortdesc">Mediatrix devices are supplied with an exhaustive set of documentation. </p>
<p class="p">Mediatrix user documentation is available on the <a class="xref" href="http://documentation.media5corp.com" target="_blank">Media5 Documentation
Portal</a>.</p>
<div class="p">Several types of documents were created to clearly present the information you are looking for.
Our documentation includes:<ul class="ul" id="concept_v4k_q3h_1r__ul_bqy_cjh_1r">
<li class="li"><strong class="ph b">Release notes</strong>: Generated at each GA release, this document includes the known and
solved issues of the software. It also outlines the changes and the new features the release
includes.</li>
<li class="li"><strong class="ph b">Configuration notes</strong>: These documents are created to facilitate the configuration of a
specific use case. They address a configuration aspect we consider that most users will need to
perform. However, in some cases, a configuration note is created after receiving a question
from a customer. They provide standard step-by-step procedures detailing the values of the
parameters to use. They provide a means of validation and present some conceptual information.
The configuration notes are specifically created to guide the user through an aspect of the
configuration. </li>
<li class="li"><strong class="ph b">Technical bulletins</strong>: These documents are created to facilitate the configuration of a
specific technical action, such as performing a firmware upgrade.</li>
<li class="li"><strong class="ph b">Hardware installation guide</strong>: They provide the detailed procedure on how to safely and
adequately install the unit. It provides information on card installation, cable connections,
and how to access for the first time the Management interface.</li>
<li class="li"><strong class="ph b">User guide</strong>: The user guide explains how to customise to your needs the configuration
of the unit. Although this document is task oriented, it provides conceptual information to
help the user understand the purpose and impact of each task. The User Guide will provide
information such as where and how TR-069 can be configured in the Management Interface, how to
set firewalls, or how to use the CLI to configure parameters that are not available in the
Management Interface.</li>
<li class="li"><strong class="ph b">Reference guide</strong>: This exhaustive document has been created for advanced users. It
includes a description of all the parameters used by all the services of the Mediatrix units.
You will find, for example, scripts to configure a specific parameter, notification messages
sent by a service, or an action description used to create Rulesets. This document includes
reference information such as a dictionary, and it does not include any step-by-step
procedures. </li>
</ul></div>
</div>
</article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic concept nested0" aria-labelledby="ariaid-title11" id="concept_fqm_rv4_k4">
<h1 class="title topictitle1" id="ariaid-title11">Copyright Notice</h1>
<div class="body conbody"><p class="shortdesc">Copyright © 2023 Media5 Corporation.</p>
<p class="p">This document contains information that is proprietary to Media5 Corporation.</p>
<p class="p">Media5 Corporation reserves all rights to this document as well as to the Intellectual Property
of the document and the technology and know-how that it includes and represents.</p>
<p class="p">This publication cannot be reproduced, neither in whole nor in part, in any form whatsoever,
without written prior approval by Media5 Corporation.</p>
<p class="p">Media5 Corporation reserves the right to revise this publication and make changes at any time
and without the obligation to notify any person and/or entity of such revisions and/or
changes.</p>
</div>
</article></article></main></body></html> | 