Chapter 3: KX III Administration190Note: The CSR and the private key file are a matched set and shouldbe treated accordingly. If the signed certificate is not matched withthe private key used to generate the original CSR, the certificate willnot be useful. This applies to uploading and downloading the CSRand private key files. Once you get the certificate from the CA, upload it to the KXIII by clicking Upload. Reboot the KX III to activate the certificate.After completing these steps the KX III has its own certificate that is usedfor identifying the card to its clients.Important: If you destroy the CSR on the KX III there is no way to get itback! In case you deleted it by mistake, you have to repeat the threesteps as described above. To avoid this, use the download function soyou will have a copy of the CSR and its private key.Security BannerKX III provides you with the ability to add a security banner to the KX IIIlogin process. This feature requires users to either accept or decline asecurity agreement before they can access the KX III. The informationprovided in a security banner will be displayed in a Restricted ServiceAgreement dialog after users access KX III using their login credentials.The security banner heading and wording can be customized, or thedefault text can be used. Additionally, the security banner can beconfigured to require that a user accepts the security agreement beforethey are able to access the KX III or it can just be displayed following thelogin process. If the accept or decline feature is enabled, the user'sselection is logged in the audit log.To configure a security banner:1. Click Security > Banner to open the Banner page.2. Select Display Restricted Service Banner to enable the feature.3. If you want to require users to acknowledge the banner prior tocontinuing the login process, select Require Acceptance ofRestricted Service Banner. In order to acknowledge the banner,users will select a checkbox. If you do not enable this setting, thesecurity banner will only be displayed after the user logs in and willnot require users acknowledge it.4. If needed, change the banner title. This information will be displayedto users as part of the banner. Up to 64 characters can be used.
