24
•
3-Series Control Systems
Reference Guide – DOC. 7150B
Load the Certificate Files
Once the CA validates the request.csr file, the CA issues the validated certificate
to the requestor. The following certificate files are required for deployment on
the control system:
•
Signed CA-signed certificate in .cer format (base-64 encoded)
•
Certification chain (concatenation of the issuing CA and its CA) in .cer
format (base-64 encoded)
To upload the CA-signed certificate to the control system:
1.
Rename the three certificate files as follows:
•
Rename the signed certificate file to “srv_cert.cer”.
•
Rename the certification chain file to “rootCA_cert.cer”.
2.
Use an SCP or SFTP client to copy the two certificate files to the \User
directory on the control system.
3.
Connect to the control system via SSH or Crestron Toolbox.
4.
Issue the
delete
\Sys\rootCA_cert.cer
and
delete
\Sys\srv_cert.cer
, commands to delete any existing certificate files.
5.
Issue the
move
\User\rootCA_cert.cer \Sys
and
move
\User\srv_cert.cer \Sys
commands to move the new certificate files
to the \Sys directory.
Enable TLS/SSL with the CA-Signed Certificate
To enable TLS/SSL with the CA-signed certificate:
1.
Issue the
SSL CA
command in the control system console.
2.
Issue the
reboot
command to reboot the control system.
Externally-Signed Certificates
The following procedures are used to load an externally-signed certificate to the
control system.
The following certificate files are required for deployment on the control system.
These files are generally provided by the IT administrator:
•
Private key in .pem format
•
Signed CA-signed certificate in .cer format (base-64 encoded)
•
Certification chain (concatenation of the issuing CA and its CA) in .cer
format (base-64 encoded)
