OPTO 22 GROOV BOX, User Manual

Page: 57 / 75

USING A CA-SIGNED CERTIFICATE ON GROOV BOX
groov Box User’s Guide
50
Android Devices
1.
Email the <server name>.cer file you created previously (see “Step 1: Create a Self-Signed
Certificate and Private Key” on page 42 ) to an email account accessible from Android.
2.
On the Android device, open the email and click the <server name>.cer file to install the
certificate.
3. When prompted for a certificate name, type in a name. Make sure “Credential use:” is set to
“VPN and apps.”
4.
Click OK.
5. To verify the certificate was installed correctly, open a browser and enter the hostname
specified on the certificate. If the browser does not generate an untrusted site warning, the
certificate was installed correctly.
Using a CA-Signed Certificate on groov Box
Follow these steps to create a certificate signing request (CSR) and install a CA-signed certificate:
“Step 1: Create a CSR” (see page 50 )
“Step 2: Obtain a CA-Signed Certificate” (see page 52 )
“Step 3: Install the CA-Signed Certificate on groov Box” (see page 53 )
Step 1: Create a CSR
IMPORTANT: This procedure will create and install a new private key on the groov box.
Follow the steps below to generate a certificate signing request (CSR).
You will send the CSR to the Certificate Authority (CA) of your choice. The CA verifies the
identification information and signs the CSR, which then becomes a CA-signed Certificate.
1.
In groov Admin, select Networking > SSL Configuration.
2. Click the Create certificate tab.
3.
Fill in the Create SSL key form as follows:
Server name : Enter the fully qualified hostname of this groov Box that client browsers will use
to access groov (i.e. the hostname and domain name, such as mobilehmi.mydomain.com .) The
server name may contain letters a–z (case insensitive), digits 0–9, or a hyphen (-). No other
characters are allowed. The server name must not start with a hyphen.
For example, if the URL you will use to access groov in client browsers is
https://process1.acme.com , then you enter
process1.acme.com
If the URL client browsers will use to access this groov Box is: