Security; Server Certificate Management; Create A Certificate Signing Request (Csr) Or Create An Internal Certificate - Elatec TCP3 3.0.3.1 Technical Manual

6. Configuration via Web Page

6.3. Security

Figure 6.4.: Security Setup for TCP3
TCP3 supports encrypted communication for its own web pages as well as for USB in client mode. Encryp-
tion is performed via the use of certificates which contain the appropriate encryption key. Before getting
started with creation of any of the certificates on the security tab and especially the TCP3 server certifi-
cates we recommend that network set-up be completed first along with a reboot. Network settings such as
the host name, domain name and IP address are often used within a CSR or internal certificate, so if the
network settings change a new certificate will be required. Also note that certificates need to be unzipped
as TCP3 does not support chained certificates. After a firmware upgrade or downgrade the root Certificate
Authority(s) will be retained but the self-signed or externally signed certificates will be deleted. Upon the
reboot which occurs after upgrade a new self-signed cert will be regenerated but an externally signed cert
will need to be recreated. The status log will show this.
6.3.1. Server Certificate Management
Use this section to configure TCP3 to utilize secure, encrypted connections with client applications (ex.
web browser, TCP3 Config) making connections to TCP3. To support a secure, encrypted connection
TCP3 must have an SSL certificate.
There are two types of SSL certificates and TCP3 supports both: Signed Certificate and Self-Signed
Certificate. Both enable a client to authenticate the identity of a TCP3 and encrypt information sent to
it.
6.3.1.1. Create a Certificate Signing Request (CSR) Or Create an internal certificate
In order to encrypt web page communication one must either request TCP3 create a self-signed certificate
or install a signed certificate received from an appropriate IT individual.
To create the Certificate Signing Request, select the Create CSR button then enter the Country code,
state, Organization and Organization unit.
Page 36 of 61