...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
Agent certificates are created with IndeedCM.Agent.Cert.Generator.exe utility from the Indeed CM installation package.
...
...
...
...
The /csn parameter initiates the certificate issue procedure for DNS name of the workstation the utility is run at. To generate certificates for another workstation, run the utility with /sn <DNS name of workstation> parameter.
The /installToStore publishes the certificates issued by the utility to the server certificate storages:
...
...
...
...
2. The Indeed CM Agent CA.key file shall appear in the utility folder. The file contains the Indeed CM Agent CA certificate image and certificate key value.
3. Place the Indeed CM Agent CA certificate to Trusted Root Certification Authorities at all user workstations.
| Info |
|---|
| The Active Directory group policy mechanism can be used to distribute the certificate to user workstations. |
4. Set up a secure connection to Agent site. To do this:
- Switch to IIS Manager.
- Select Indeed CM Agent Site, then switch to Bindings section.
- Select the binding to 3003 port and click Edit.
| Warning |
|---|
| Port 3003 is set by default. If you use another port, then you’d have to create and configure a new binding for it. Make sure that the port is open for incoming connections in firewall. |
- Define Indeed CM Agent SSL as certificate and click OK.
5. Figure 1 shows an example of setting a binding for Indeed CM Agent Site site.
Figure 1 – Setting a secure connection to Indeed CM server to work with Agents.
6. If your environment has more than one Indeed CM server with Agents, then a separate Agent SSL certificate is required for each server. The root certificate is one and the same for all the servers. To create a SSL certificate for additional server, copy the folder with IndeedCM.Agent.Cert.Generator.exe utility and Indeed CM Agent CA.key root certificate key file, then execute the following command:
...
...
...
agent_root_ca.json file> /ssl /sn <DNS server name Axidian CertiFlow> /installToStore |
Configuring secure connection to the agent services site
- Open the IIS Manager, select Axidian CertiFlow Agent Site and go to Bindings...
- Select binding to 3003 port and click Edit...
- Define CM Agent SSL as SSL certificate and click OK.
| Note |
|---|
3003 port is set by default. If you use another port, create and configure a new binding for this port. The port must be open to incoming connections in the firewall. SSL/TLS certificate can be an RSA certificate issued by any trusted CA for Axidian CertiFlow server:
|
...
| icon | false |
|---|---|
| title | Example: |
...