Welcome to the new Schneider Electric Community

It's your place to connect with experts and peers, get continuous support, and share knowledge.

  • Explore the new navigation for even easier access to your community.
  • Bookmark and use our new, easy-to-remember address (community.se.com).
  • Get ready for more content and an improved experience.

Contact SchneiderCommunity.Support@se.com if you have any questions.

Close
Invite a Co-worker
Send a co-worker an invite to the Exchange portal.Just enter their email address and we’ll connect them to register. After joining, they will belong to the same company.
Send Invite Cancel
84766members
354197posts

HTTPS access to DCE

EcoStruxure IT forum

A support forum for Data Center Operation, Data Center Expert, and EcoStruxure IT product users to share knowledge on installation, configuration, and general product use.

DCIM_Support
Picard
Picard
0 Likes
5
275

HTTPS access to DCE

This question was originally posted on DCIM Support by Simon Ooi Liang Chieh on 2017-03-15


Hi. I'm using DCE version 7.3.1.114

I'm thinking of enabling HTTPS access to DCE. 

So far it worked if I create a self-signed certificate (goto System > Server Administration settings > Server Access > under Web Server tab, click Modify Certificate and Create New Self-Signed Certificate).

However, when I access DCE from my browser, it'll say the certificate is not issued by a trusted CA. I am wondering, if I can use a Certificate created by Microsoft Windows-based CA instead? I'll assume that since i'm logged on to AD, I'll not have the issue of "certificate not issued by a trusted CA" problem...

What format should the Windows-based Certificate be created in? PEM? Do I just go through the same steps above, but instead of creating a new self-signed certificate, I'll choose "Add Certificate" and select the cert created by Microsoft Windows-based CA?

Thanks!

Regards, Simon

 

 

 

 

(CID:114231829)

5 Replies 5
DCIM_Support
Picard
Picard
0 Likes
2
275

Re: HTTPS access to DCE

This answer was originally posted on DCIM Support by Christopherus Laurentius on 2017-03-15


Hi Simon,

DCE allows you to copy paste the content of the SSL cert for the https access.

I've never tried the upload though.

 

Before you do so, I'd highly recommend the following:

1.Enable http access, just in case you can't access on https due to ssl cert

2. Backup.


Lastly, please contact your local tech support with your DCE software entitlement to request for the DCE upgrade link. Your DCE version is not the latest.

 

To add the SSL cert, go to DCE client, System–>Server Administration Settings–>Server SSL Certificate.

Regards,

Chris

(CID:114231887)

DCIM_Support
Picard
Picard
0 Likes
0
275

Re: HTTPS access to DCE

This comment was originally posted on DCIM Support by Simon Ooi Liang Chieh on 2017-03-15


Hi Chris,

Thanks for the feedback. From the Online Help, I have the feeling that the Server SSL Certificate shown in your screenshot above is meant for creating a secured communication between DCE and the monitored devices? Is it also used for enabling https web access to the DCE portal itself (e.g. https://mydceserver.mydomain.com)?

Thanks!

Regards, Simon

(CID:114233588)

DCIM_Support
Picard
Picard
0 Likes
0
275

Re: HTTPS access to DCE

This comment was originally posted on DCIM Support by Christopherus Laurentius on 2017-03-15


For web access, use this one:

 

Earlier is for comms between DCE to  an SMTP server, Active Directory or OpenLDAP server, or a NetBotz Appliance.

 

(CID:114233585)

DCIM_Support
Picard
Picard
0 Likes
0
275

Re: HTTPS access to DCE

This answer was originally posted on DCIM Support by Steven Marchetti on 2017-03-15


Hi Simon,

 

The page you suggested is for adding a cert that will allow DCE to communicate to  NetBotz device that is also configured for SSL communications. This is something you'll need to do if you turn off http.

 

If you're looking to create a cert for accessing the server however, you want to go to the server access section, web server tab, and choose modify cert. You will first want to create a certificate signing request and pass that on to your certificate signing authority:

 

Yes, after you get the cert back, you will want to go to the same page and choose add certificate and add it in a .PEM format.

 

Steve.

 

 

 

(CID:114232017)

DCIM_Support
Picard
Picard
0 Likes
0
275

🔒 Closed

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.