Encrypting the connection to the SharpV web portal using a self-signed certificate (Basic) - Security Center 5.11

Security Center Hardening Guide 5.11

Product
Security Center
Content type
Guides > Administrator guides
Version
5.11
Language
English
Last updated
2023-03-13

To connect to the SharpV web portal using an HTTPS connection, you need a certificate that is either self-signed or issued by a trusted certificate authority (CA) and install it on the SharpV camera.

What you should know

SharpOS 12.7 GA and later cannot operate without HTTPS and requires the use of a certificate. A self-signed certificate will be automatically created for the unit that did not already have one.

Procedure

To encrypt connection to the Sharp Portal using a self-signed certificate:

  1. On the machine where you want to register the certificate, log on as an Administrator.
  2. Log on to the Sharp Portal.
  3. From the Configuration menu, select the Security page.
  4. From the Certificate section, select + Self-signed.
  5. Enter the required information for the certificate and click OK.
    • The Country field requires a two-letter country code.
    • If you are also using the certificate to connect to the Archiver, the Sharp's common name (Sharp's IP address if connecting to the Archiver) defined in the certificate must be the Sharp unit's IP address, not the Sharp name.
    The message Operation succeeded is displayed and the signing request is added to the certificate list.
  6. Click the Active button for the certificate.
  7. Click Save and reboot and click OK to confirm the reboot.
    NOTE: Depending on the browser you are using, you might receive warnings because the certificate is not signed by a trusted certificate authority.

To install the certificate on a workstation:

  1. Click on the certificate to display the Certificate details.
  2. Click Download certificate and save the certificate file as prompted by your browser.
  3. Double-click the certificate.cer file and click Install Certificate.
  4. The Certificate Import Wizard prompts you to select a store location. Select Local Machine and click Next.
  5. The wizard prompts you to select the certificate store you want to use. Select Place all certificates in the following store and click Browse.
  6. From the Select Certificate Store window, select Trusted root certification Authorities and click OK.
  7. Click Next to continue, and click Finish to close the wizard.
    The system displays the message: The import was successful.
  8. Close all web browsers and open the Windows Task Manager to ensure that no browser processes are running in the background.
  9. Log on to the Sharp Portal. You are automatically logged on in HTTPS mode.
    A lock icon () in the browser's address bar indicates that you are now logged on to the camera with a secure connection.