HTTPS access to DCE

[DCIM_Support]

Hi. I'm using DCE version 7.3.1.114

I'm thinking of enabling HTTPS access to DCE. 

So far it worked if I create a self-signed certificate (goto System > Server Administration settings > Server Access > under Web Server tab, click Modify Certificate and Create New Self-Signed Certificate).

However, when I access DCE from my browser, it'll say the certificate is not issued by a trusted CA. I am wondering, if I can use a Certificate created by Microsoft Windows-based CA instead? I'll assume that since i'm logged on to AD, I'll not have the issue of "certificate not issued by a trusted CA" problem...

What format should the Windows-based Certificate be created in? PEM? Do I just go through the same steps above, but instead of creating a new self-signed certificate, I'll choose "Add Certificate" and select the cert created by Microsoft Windows-based CA?

Thanks!

Regards, Simon

(CID:114231829)

[DCIM_Support]

Hi Simon,

DCE allows you to copy paste the content of the SSL cert for the https access.

I've never tried the upload though.

Before you do so, I'd highly recommend the following:

1.Enable http access, just in case you can't access on https due to ssl cert

2. Backup.

Lastly, please contact your local tech support with your DCE software entitlement to request for the DCE upgrade link. Your DCE version is not the latest.

To add the SSL cert, go to DCE client, System–>Server Administration Settings–>Server SSL Certificate.

Regards,

Chris

(CID:114231887)

[DCIM_Support]

Hi Chris,

Thanks for the feedback. From the Online Help, I have the feeling that the Server SSL Certificate shown in your screenshot above is meant for creating a secured communication between DCE and the monitored devices? Is it also used for enabling https web access to the DCE portal itself (e.g. https://mydceserver.mydomain.com)?

Thanks!

Regards, Simon

(CID:114233588)

[DCIM_Support]

For web access, use this one:

Earlier is for comms between DCE to  an SMTP server, Active Directory or OpenLDAP server, or a NetBotz Appliance.

(CID:114233585)

[DCIM_Support]

Hi Simon,

The page you suggested is for adding a cert that will allow DCE to communicate to  NetBotz device that is also configured for SSL communications. This is something you'll need to do if you turn off http.

If you're looking to create a cert for accessing the server however, you want to go to the server access section, web server tab, and choose modify cert. You will first want to create a certificate signing request and pass that on to your certificate signing authority:

Yes, after you get the cert back, you will want to go to the same page and choose add certificate and add it in a .PEM format.

Steve.

(CID:114232017)

[DCIM_Support]

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.