Skip to Content

Changes for page CI Generated Certificates

Last modified by Alexander Mott on 2026/01/09 18:15
From version 10.1
edited by Alexander Mott
on 2026/01/09 18:15
Change comment: There is no comment for this version
To version 6.1
edited by Mark Kohlmann
on 2022/01/13 21:18
Change comment: There is no comment for this version

Summary

Details

Page properties
Author
... ... @@ -1,1 +1,1 @@
1 -XWiki.alexander\.mott@chiefintegrations\.com
1 +XWiki.mark\.kohlmann@chiefintegrations\.com
Content
... ... @@ -6,26 +6,14 @@
6 6  |Root|[[Root Cert>>attach:CIRoot.cer]]
7 7  |Intermediate|[[Intermediate Cert>>attach:CICustomer.cer]]
8 8  
9 +
9 9  For Processors (3-series greater than 1.8001.4701.23085 or later / 4-series greater than v2.6000):
10 10  
11 -* Load the root and intermediate cert to their respective stores (Toolbox->Functions->Security Certificates)
12 -** Select Root Tab
13 -*** Download [[Root Cert>>attach:CIRoot.cer]]
14 -*** Add Root Certificate and select the downloaded file
15 -** Select Intermediate Tab
16 -*** Download [[Intermediate Cert>>attach:CICustomer.cer]]
17 -*** Add Intermediate Certificate and select the downloaded file
18 18  * Generate Certificate Signing Request (Toolbox->Functions->SSL Management->Play button)
19 -** If Toolbox's SSL Management gives an error, try generating the request through Text Console "##createcsr##" command
20 -*** Execute "##createcsr ?##" first to get all parameter values, and execute your command, e.g.: ##createcsr US:California:"Mission Viejo":"Chief Integrations":"Suport":100.64.0.1:support@chiefintegrations.com##
21 -*** Use File Manager or a separate SFTP program to extract the generated request.csr from the location indicated in the Text Console (typically "Internal Flash\sys\request.csr")
22 22  * Send the following to Chief Integrations:
23 23  ** CSR (Certificate Signing Request) file
24 24  ** FQDN (Fully qualified domain name) of the processor
25 -*** For isolated Control Subnets, running "##doma##" command on the processor will give the FQDN (typically "[hostname].crestron")
26 -*** Use Windows Terminal and run "ping  [FQDN]" to verify the FQDN is correct, e.g.
27 27  ** IP Address of the processor
28 -*** For isolated Control Subnets, this should be the IP on the CS, e.g. 100.64.0.1 or 172.22.0.1
29 29  * Chief Integrations will send back the signed certificate
30 30  * Load the signed certificate (Toolbox->Functions->SSL Management->Play button->Upload Signed Certificate)
31 31  * Load the Root-Intermediate chain (Toolbox->Functions->SSL Management->Play button->Upload Root Certificate)