Certificates for SE 2

[petefish]

Hi Guys
I'm just starting to have a play around with Server Edition,I have Installed it three times now on a test PC and it all works ok go through ignition then put it into Demo mode I install the certificates when they first show. It seems ok because I can't get to platform view until they are properly installed. I can then configure it with manager and works fine. But I cant get back in with

https://192.168.42.1:7070

or onexportal. I install both Certifcates
root-ca.pem and root.ca
The first time I installed it I could get on onexportal.
I have tried importing into IE and Chrome but when I try connecting I get There is a problem with this website security certificate and only get the option to close web page.
Must be something easy I'm missing but its doing my nut in trying to figure it out.
Thanks for any help you can give me
Pete.

 

[intrigrant]

You must set the certificate as trusted in IE and Chrome and Firefox
Google Chrome:
[ol 1]
[li] Using Chrome, hit a page on your server via HTTPS and continue past the red warning page (assuming you haven't done this already).[/li]
[li] Open up Chrome Settings > Show advanced settings > HTTPS/SSL > Manage Certificates.[/li]
[li] Click the Authorities tab and scroll down to find your certificate under the Organization Name that you gave to the certificate.[/li]
[li] Select it, click Edit, check all the boxes and click OK.[/li]
[li] Restart Chrome[/li]
[/ol]
Internet Explorer
[ol 1]
[li] Start Internet Explorer running as a user with administrative privileges.[/li]
[li] Browse to server computer using the computer name (ignore certificate warnings)[/li]
[li] Click the ”Certificate Error” text in the top of the screen and select ”View certificates”[/li]
[li] In the Certificate dialog, click Install Certificate -> Next[/li]
[li] Select Place all certificates in the following store -> Browse[/li]
[li] Check Show Physical Stores check box[/li]
[li] Select Trusted Root Certificate Authorities – Local Computer[/li]
[li] Click OK – Next – Finish – OK[/li]
[li] Restart Internet Explorer[/li]
[/ol]
Mozilla Firefox
[ol 1]
[li] Goto Extras/Properties/Advanced/Encryption --> View Certificates[/li]
[li] Select the Avaya certificate[/li]
[li] Edit trust and check all selectable boxes[/li]
[li] Restart Firefox[/li]
[/ol]

 

[petefish]

Thanks for that
But when in IE I click on certificate error I don't get anything saying view certificates. I have put both certificates in trusted root certificate authorities. I also don't get Physical stores check box.

 

[intrigrant]

I don't have IE on my PC (win10) so I can't check, it differs between versions as ususal with MS
Try to go into Options and search for certificates or do a google search for your version "self signed certificate error

 

[petefish]

Do I need to install both Certificates root-ca.pem and root.ca

 

[derfloh]

I don't know it without looking into the docs or seeing the screens. But TexhnicalBulletin 175 is a good point to start. It has been published with the GA release of R9.1

 

[petefish]

No luck with the Tech bulletin, but I have just tried my daughters home lap top and connected to

https://192.168.42.1:/7070

this makes me think it could be something to do with some security policy that's on all our work computers. Could that be a possibility?

 

[petefish]

Thanks for the help guys. I think I have sorted it when I reinstalled the software it was because I wanted to test something on the onexmobile. So I changed the domain name when I installed, so I think because of my laptop security settings it wouldn't connect. I have now reinstalled and left the default localhost domain. Well all my messing about as taught me something about certificates I suppose.