Crestron 3 Series Reference Manual page 29

Load the Certificate Files
To upload the externally-signed certificate to the control system:
1.
2. Use an SCP or SFTP client to copy the three certificate files to the \User
3. Connect to the control system via SSH or Crestron Toolbox.
4. Issue the delete \Sys\rootCA_cert.cer, delete \Sys\srv_cert.cer,
5. Issue the move \User\rootCA_cert.cer \Sys, move
Enable TLS/SSL with the Externally-Signed Certificate
To enable TLS/SSL with the externally-signed certificate:
1.
2. Issue the reboot command to reboot the control system.
3. Issue the del \Sys\*.cer and del \Sys\*.pem commands.
Reference Guide – DOC. 7150B
Rename the three certificate files as follows:
Rename the private key file to "srv_key.pem".
•
Rename the signed certificate file to "srv_cert.cer".
•
Rename the certification chain file to "rootCA_cert.cer".
•
directory on the control system.
and delete \Sys\srv_key.pem commands to delete any existing
certificate files.
\User\srv_cert.cer \Sys, and move \User\srv_key.pem \Sys
commands to move the new certificate files to the \Sys directory.
Issue the SSL CA command in the control system console.
3-Series Control Systems • 25