ControlByWeb XW-110 User Manual page 21

XW-110™ WiFi Temperature Sensor Users Manual
Manual Certificate Upload
Client Certificate
A client certificate is used with custom remote services servers for device authentication. To upload a
custom client certificate to the XW-110, click the Browse button, find the PEM formatted certificate file,
and select Submit.
Client Key
A client key is used with custom remote services servers for device authentication. The key that is
uploaded must be the correct key associated with the Client Certificate. Care should be taken with
where this client key is stored as it is meant only to be known to the XW-110. To upload a custom client
key to the XW-110, click the Browse button, find the PEM formatted file, and select Submit.
Client CA
A CA (Certificate Authority) is used by the XW-110 to verify the authenticity of the remote services
server it is connecting to. It is important to note that this CA does not need to be the CA that signed the
Client Certificate used by the XW-110. Rather the CA needs to be the one used to sign the certificate
used by the remote services server. To upload a custom CA to the XW-110, click the Browse button, find
the PEM formatted file, and select Submit.
Remote Services Notes: Remote Services initiates an outgoing connection to a server at a remote
location. This can be used in an environment where a web server on the Internet provides a custom web
page to XW-110 and other ControlByWeb products. Users access the XW-110 through the web server
rather than communicating directly with it. This method is sometimes referred to as "web services" and
allows programmers to create powerful, custom web pages to multiple devices using the web
programming languages of their choice.
Remote Services initiates the connection to the external web server (rather than the web server initiating
communications to the XW-110). This has two main benefits. First, the web server does not need to
know the IP address of XW-110. This means that XW-110-Plus can get its IP address dynamically from
a DHCP server, simplifying the installation. Second, since the connection from XW-110 is outgoing,
rather than incoming, the local router on the network where XW-110 resides doesn't need to be
configured to forward sockets. This simplifies the installation. Since the router configuration is not
modified, the risk of compromising security on the local network is eliminated.
In order to allow remote services to operate is a power conscious fashion, remote services will
disconnect from the remote services server if it is the only enabled service (modbus and web server are
disabled) and external power is not available. If externally powered, remote services will be fully
available until external power is lost. However, if remote services is enabled but disconnected due to no
external power, it will still connect and push the state.xml if a temperature alarm occurs that has remote
services state message enabled. Once the message is sent, remote services will disconnect and low
power modes will be resumed. If power is restored, remote services will reconnect to the server and
stay connected.
Xytronix Research & Design, Inc.
Web Server
Page 21