Uploading REST API SSL Certificate

Overview

SSL Certificates provide a trusted relationship between 3VR Enterprise Server and its Appliances. The server establishes trust by sending a trusted certificate with certificate key to the Appliances.

Purpose

To upload REST API SSL Certificate from 3VR VMS System Manager or Appliances into embedded 3VR Appliances.

For the successful upload of REST API SSL Certificate, a valid certificate at domain level issued by the certificate authority (CA) with the certificate key must be uploaded into the Appliances.

To upload REST API SSL Certificate from System Manager:

  1. Login to 3VR Enterprise Server using your credentials. Open System Manager.
  2. Click Maintenance ->Update Software.
  3. Select Appliance Upgrade.

    You must see the appliances list configured under your 3VR VMS Server for your Device as shown in the Figure below.

  4. Select the Appliances for which you wish to upload the SSL Certificates and click Inspect.

    The Appliances status changes to OK and the Upload Certificate button gets enabled.

    SSL certificates can only be uploaded to Appliances having OK status change and with Upload Certificates enabled as shown in Figure 2 below.

  5. Click Upload Certificate.
    The Choose 3VR Update file dialog box displays a list of CA Authority as shown in the Figure below.

  6. Select the valid .PFX file and click OK.

    Valid certificate keys from GoDaddy (Web Hosting Company) with *.3vr.net wild card patterns are supported within 3vr.net Domain.


  7. When prompted, enter the correct SSL certificate password and click Save as shown in the Figure below.

    The .PFX file contains the SSL certificate’s public and private keys. A password is created by the user during the export process and the same password is required while importing the certificate. “3MeDeee” is the default Techrep user account password.


    Now, the SSL certificate we have chosen is uploaded to the respective appliances. The status shows “unreachable” because after uploading the certificate key we have to STOP/START web services on individual appliances. This takes couple of seconds to resume the service as shown in the Figure below.


  8. Click Update Software tab in System Manager as shown in the Figure below.
  9. After few seconds, click Inspect again to confirm if the appliance status is “OK” as shown in the Figure above.
  10. Access the URL with valid domain. The URL format is

Now, you will see the secure https connection.

Appendix A: Troubleshooting Wrong Password during .PFX File Upload in 3VR Maintenance Tab

During SSL certificate upload, when the user enters a wrong password that is not matching with the .PFX credentials, the PFX file upload remains successful and does not show any error message. 

  1. The user can track the password mismatch message in the logs as shown below.



    The next time when the user uploads the .PFX file with the correct password, the SSL certificate is uploaded with the valid credential.