Encrypting the connection to the SharpV web portal using a certificate issued by a trusted certificate authority (CA) (Basic) - To encrypt the connection to the SharpV web portal, you can install a certificate that is issued by a trusted certificate authority (CA). - Security Center 5.12

Security Center Hardening Guide 5.12

Product
Security Center
Content type
Guides > Administrator guides
Version
5.12
ft:locale
en-US
Last updated
2024-12-17

To encrypt the connection to the SharpV web portal, you can install a certificate that is issued by a trusted certificate authority (CA).

What you should know

SharpOS 12.7 GA and later cannot operate without HTTPS and requires the use of a certificate. A self-signed certificate will be automatically created for the unit that did not already have one.

Procedure

  1. On the machine where you want to register the certificate, sign in as an Administrator.
  2. Log on to the Sharp Portal.
  3. From the Configuration menu, select the Security page.
  4. Click + Signing request.
  5. Enter the required information for the certificate signing request and click OK.
    NOTE:
    • The Country field requires a two-letter country code.
    • If you are also using the certificate to connect to the Archiver, the Sharp's common name defined in the certificate must be the Sharp unit's IP address, not the Sharp name.
    Result: You receive the message Operation succeeded and the signing request is added to the certificate list with not signed displayed for the Issuer.
  6. Click on the certificate to display the Certificate details.
  7. Click Copy to clipboard.
    Copying the signing request.
  8. Send the certificate signing request to a certificate authority.
    IMPORTANT: Do not delete the signing request if it has been used to request a certificate.
    You receive an SSL certificate signed by the certificate authority.
  9. In the Certificate Details window, click Install signed certificate, browse to the certificate location, and click Open.
  10. Click Save.
    The system displays the message: Installed signed certificate... successful.
    NOTE: If you are not using a trusted CA such as VeriSign or DigiCertIf, you might receive the error The certificate chain is not trusted.
    1. Collect the required root certificate from your trusted CA. Collect the required intermediate certificates from your intermediate CAs.
    2. For each intermediate certificate in the chain, click Install Certificate Authority, select the certificate and click Open.
    3. Continue with Step 9 to install the root certificate. If you still receive the error, contact the AutoVu Support team.
  11. Refresh the browser (F5).
    The certificate is displayed in the Certificate list.
  12. Click the Active button for the certificate.
  13. Click Save and reboot and click OK to confirm the reboot.

Results

When the system comes back online, notice that the URL displays that you are in HTTPS mode. A lock icon () in the browser's address bar indicates that you are now logged on to the unit with a secure connection.