Server Certificates - Crestron 3 Series Reference Manual

To configure TLS settings without reconfiguring SSL, issue the TLSVERSION
command:
•
•
TLS/SSL certificates may also be managed using the SSL Management function
in Crestron Toolbox. For more information, refer to the Crestron Toolbox help file.

Server Certificates

When authentication is enabled, the control system uses a server-side certificate
to authenticate various control system components, including the web server.
One of the following three server-side certificate types may be used:
•
•
•
Instructions for configuring each server certificate type are provided in the
sections that follow.
Self-Signed Certificates
To use a self-signed certificate with TLS/SSL:
1.
2. Issue the reboot command to reboot the control system.
CA-Signed Certificates
The following procedures are used to obtain and load a CA-signed certificate to
the control system.
22 • 3-Series Control Systems
Syntax: TLSVERSION [TLS1.0 | TLS1.2]
TLS1.0: Implies that TLS 1.0 is the minimum version for TLS
o
connections
TLS1.2: Implies that TLS 1.2 is the minimum version for TLS
o
connections
No parameter: Displays the current setting
o
Example: TLSVERSION TLS1.2
A self-signed certificate that is generated by the control system
A CA (Certificate Authority)-signed certificate and signing chain that are
loaded onto the control system
An externally requested and signed certificate, signing chain, and private
key that are loaded onto the control system
Issue the SSL SELF command in the control system console.
Reference Guide – DOC. 7150B