Server - Importing A Ca Created Ssl Certificate - AMX NetLinx NI-3101-SIG Operation/Reference Manual

11. Once the returned CA certificate has been received, follow the procedures outlined in the following
section to import the returned certificate (over a secure connection) to the target Master.

Server - Importing a CA created SSL Certificate

Before importing a CA server certificate:
1. Take the returned certificate (signed by the CA and encrypted with new information which makes it
different from the text string that was previously sent) and copy it into the clipboard.
2. Navigate to the Server Certificate page by clicking System Settings > Manage System > Server >
Import SSL Certificate to open the Import Certificate page (FIG. 51).
FIG. 51 Import SSL Certificate dialog
3. Place the cursor within the empty window and paste the raw text data (in its entirety) into the field.
4. Click the Update button to enter the new encrypted certificate information and save it to the Master.
Once a certificate has been purchased from an external CA and then installed onto a
specific Master, DO NOT regenerate the certificate or alter its properties
(example: bit length, city, etc.). If the purchased certificate is regenerated, it becomes
invalid.
A certificate consists of two different Keys:
NI-3101-SIG Signature Series NetLinx Integrated Controller
First, have a self-generated certificate installed onto the target Master.
Secondly, enable the SSL security feature from the Enable Security page, to establish a secure
connection to the Master prior to importing the encrypted CA certificate. Refer to theSecurity
- System Level Security page section on page 49 for more information about enabling SSL
security.
Master Key is generated by the Master and is incorporated into the text string sent to the CA
during a certificate request. It is specific to a particular request made on a specific Master.
Public Key is part of the text string that is returned from the CA as part of an approved SSL
Server Certificate. This public key is based off the submitted Master key from the original
request.
Regenerating a previously requested and installed certificate invalidates the previously
purchased certificate because the Master Key has been changed.
NetLinx Security within the Web Server
Certificate text field
85