T15e Tag Deployment & User Guide
18
MobileView Server Certificates
The following certificates must be pre-installed on the MobileView Server to
allow the certificate validation to be performed by T15e Tags:
•
SSL Certificate issued for this specific server
•
All Intermediate Certificates
•
Root CA Certificate
If one of the above certificates from the Chain of Trust is not installed on the
MobileView Server, the T15e Tag will fail the Server’s SSL certificate
verification.
MobileView Server Host Name
The MobileView Server’s host name must always include its domain (i.e. mv-
srv-1.corp.aeroscout.com). The domain must correspond to the CN set in
‘subject’ field of the MobileView Server’s SSL certificate.
Certificate Definitions
T15e Tag certificate-based authentication of the MobileView Server is based
on the following definitions:
Chain of Trust
A certificate chain is an ordered list of certificates, containing an SSL
Certificate, Intermediate Certificates and a Root CA Certificate, that enable the
receiver to verify that the sender and all CA's are trustworthy.
The chain must begin with the MobileView Server’s SSL certificate, and each
certificate in the chain must be signed by the entity identified by the next
certificate in the chain.
The below figure illustrates a certification path from the Server’s SSL
Certificate to the Root CA Certificate, where the Chain of Trust begins: