Skip to Content

Changes for page CI Generated Certificates

Last modified by Alexander Mott on 2026/01/09 18:15
From version 6.1
edited by Mark Kohlmann
on 2022/01/13 21:18
Change comment: There is no comment for this version
To version 10.1
edited by Alexander Mott
on 2026/01/09 18:15
Change comment: There is no comment for this version

Summary

Details

Page properties
Author
... ... @@ -1,1 +1,1 @@
1 -XWiki.mark\.kohlmann@chiefintegrations\.com
1 +XWiki.alexander\.mott@chiefintegrations\.com
Content
... ... @@ -6,14 +6,26 @@
6 6  |Root|[[Root Cert>>attach:CIRoot.cer]]
7 7  |Intermediate|[[Intermediate Cert>>attach:CICustomer.cer]]
8 8  
9 -
10 10  For Processors (3-series greater than 1.8001.4701.23085 or later / 4-series greater than v2.6000):
11 11  
11 +* Load the root and intermediate cert to their respective stores (Toolbox->Functions->Security Certificates)
12 +** Select Root Tab
13 +*** Download [[Root Cert>>attach:CIRoot.cer]]
14 +*** Add Root Certificate and select the downloaded file
15 +** Select Intermediate Tab
16 +*** Download [[Intermediate Cert>>attach:CICustomer.cer]]
17 +*** Add Intermediate Certificate and select the downloaded file
12 12  * Generate Certificate Signing Request (Toolbox->Functions->SSL Management->Play button)
19 +** If Toolbox's SSL Management gives an error, try generating the request through Text Console "##createcsr##" command
20 +*** Execute "##createcsr ?##" first to get all parameter values, and execute your command, e.g.: ##createcsr US:California:"Mission Viejo":"Chief Integrations":"Suport":100.64.0.1:support@chiefintegrations.com##
21 +*** Use File Manager or a separate SFTP program to extract the generated request.csr from the location indicated in the Text Console (typically "Internal Flash\sys\request.csr")
13 13  * Send the following to Chief Integrations:
14 14  ** CSR (Certificate Signing Request) file
15 15  ** FQDN (Fully qualified domain name) of the processor
25 +*** For isolated Control Subnets, running "##doma##" command on the processor will give the FQDN (typically "[hostname].crestron")
26 +*** Use Windows Terminal and run "ping  [FQDN]" to verify the FQDN is correct, e.g.
16 16  ** IP Address of the processor
28 +*** For isolated Control Subnets, this should be the IP on the CS, e.g. 100.64.0.1 or 172.22.0.1
17 17  * Chief Integrations will send back the signed certificate
18 18  * Load the signed certificate (Toolbox->Functions->SSL Management->Play button->Upload Signed Certificate)
19 19  * Load the Root-Intermediate chain (Toolbox->Functions->SSL Management->Play button->Upload Root Certificate)