Skip to Content

Changes for page CI Generated Certificates

Last modified by Alexander Mott on 2026/01/09 18:15
From version 7.1
edited by Mark Kohlmann
on 2022/01/13 21:36
Change comment: There is no comment for this version
To version 10.1
edited by Alexander Mott
on 2026/01/09 18:15
Change comment: There is no comment for this version

Summary

Details

Page properties
Author
... ... @@ -1,1 +1,1 @@
1 -XWiki.mark\.kohlmann@chiefintegrations\.com
1 +XWiki.alexander\.mott@chiefintegrations\.com
Content
... ... @@ -12,14 +12,20 @@
12 12  ** Select Root Tab
13 13  *** Download [[Root Cert>>attach:CIRoot.cer]]
14 14  *** Add Root Certificate and select the downloaded file
15 -** Select Intemediate Tab
15 +** Select Intermediate Tab
16 16  *** Download [[Intermediate Cert>>attach:CICustomer.cer]]
17 17  *** Add Intermediate Certificate and select the downloaded file
18 18  * Generate Certificate Signing Request (Toolbox->Functions->SSL Management->Play button)
19 +** If Toolbox's SSL Management gives an error, try generating the request through Text Console "##createcsr##" command
20 +*** Execute "##createcsr ?##" first to get all parameter values, and execute your command, e.g.: ##createcsr US:California:"Mission Viejo":"Chief Integrations":"Suport":100.64.0.1:support@chiefintegrations.com##
21 +*** Use File Manager or a separate SFTP program to extract the generated request.csr from the location indicated in the Text Console (typically "Internal Flash\sys\request.csr")
19 19  * Send the following to Chief Integrations:
20 20  ** CSR (Certificate Signing Request) file
21 21  ** FQDN (Fully qualified domain name) of the processor
25 +*** For isolated Control Subnets, running "##doma##" command on the processor will give the FQDN (typically "[hostname].crestron")
26 +*** Use Windows Terminal and run "ping  [FQDN]" to verify the FQDN is correct, e.g.
22 22  ** IP Address of the processor
28 +*** For isolated Control Subnets, this should be the IP on the CS, e.g. 100.64.0.1 or 172.22.0.1
23 23  * Chief Integrations will send back the signed certificate
24 24  * Load the signed certificate (Toolbox->Functions->SSL Management->Play button->Upload Signed Certificate)
25 25  * Load the Root-Intermediate chain (Toolbox->Functions->SSL Management->Play button->Upload Root Certificate)