Adding Security Certificates to Clients
Security certificates can be installed to all of our launchers in multiple ways. This is generally only required when the Gateway hosting the application has SSL enabled, and is using either self-signed certificates or certificates signed by a certificate authority internal to a particular organization.
The process is listed below. Note that you will need to repeat the steps below for each applicable Gateway.
- First, navigate to the Gateway web interface.
- Download the certificate. Most web browsers provide this functionality, usually via the address bar or some other means.
Once you have a copy of the certificate, place the certificate into the following directory:
Code Block |
---|
{user folder}\.ignition\clientlauncher-data\certificates |
When adding certificates to this directory, they are trusted immediately with no further action required by the user.
Additionally, there are two more ways to manually add security certificates to the launcher. Both of these methods will mimic the behavior of certificates imported using a trust store. Using the Trusted Certificates tab of the Designer Launcher's settings allows any server with that certificate in its chain of trust to be trusted going forward. However, if you only want to add a single server, you should use the Manual tab on the Add Designer pop up. The process for trusting a single server's certificate uses the Designer Launcher, but the procedure is the same for the vision client launcher, and the perspective workstation .
To add a Trusted Certificate and allow all servers with that certificate to be accepted, click the Add
icon on the Trusted Certificates tab of the Designer Launcher Settings.
To manually trust a single server's security certificate:
- Open the Designer Launcher, and select Add Designer
- Select Manual , and search for your secure gateway server (https and port 8403). The designer launcher will detect the certificate and the message “SSL Certificate must be imported” will be displayed. To view the certificate, click on Add Designer.
Once you’ve reviewed the certificate, select Trust Certificate to import the certificate.
Info |
---|
The certificate will be imported to this directory on your client pc: C:\Users\{user}\.ignition\clientlauncher-data\certificates |
- The secure designer will now be added to your Designer Launcher with a green lock icon next to the Gateway URL.
As stated above, the directory where the Trusted Certificates are now stored is under:
Code Block |
---|
{user folder}\.ignition\clientlauncher-data\certificates |
When the Gateway's SSL certificates are signed by a recognized Certificate Authority, no additional configuration is required on the launcher.