Install Custom SSL Certificates
Installing custom SSL certificates on your SMART Controller ensures a secure connection and prevents any web browser security warnings when you access the SMART Control Panel.
About this task
When you access the SMART Control Panel, your web browser may display a warning that the connection is unsafe because the SMART uses self-signed certificates which are not verified by a Certificate Authority. If you install your organization's own SSL certificates on the SMART, you will no longer see these warnings.
Procedure
-
Acquire a valid SSL certificate, private key, and chain file.
In most cases, your organization's IT department can supply these files.
-
Place the files into a directory on the SMART Controller.
This could be the standard /etc/ssl/certs directory or /home/smart.
-
Edit the file /etc/apache2/sites-enabled/default-ssl.conf
to replace the default certificate and key files with your own.
-
Comment out the following lines, which point to the default certificate
and key files.
#SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem #SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key -
Insert the following line with the path of your
.pem file.
SSLCertificateFile /filepath/my-pem-file.pem -
Insert the following line with the path of your chain file.
SSLCertificateChainFile /filepath/my-chain-file.crt - Save the file /etc/apache2/sites-enabled/default-ssl.conf.
-
Comment out the following lines, which point to the default certificate
and key files.
-
Restart the apache web server.
systemctl restart apache2.serviceDepending on the SSL certificate, accessing the SMART using its IP address may still produce security warnings. This is because the certificate may be expecting an explicit domain name (for example, mysmart.wildlifeacoustics.com). -
Assign a fully qualified domain name to your SMART system using one of two
methods.
- Insert your SMART System's IP address and fully qualified domain name
into your local hosts file.
Example
- Mac and Linux systems: /etc/hosts
- Windows systems: C:\Windows\system32\drivers\etc\hosts
10.1.1.1 mysmart.mydomain.com - Configure your DNS service to assign a fully qualified domain name to the SMART.
- Insert your SMART System's IP address and fully qualified domain name
into your local hosts file.
