Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Introduction

...

This is used for the communucation from the CoreOne Application services to the system connectors.
The certificate must be installed on the server, where the CoreOne Application service and where the system connectors are running.

...

Manual

Step 1 - Open MMC and add a Snap-in

...

  • Click on "File" and than click on "Add/Remove Snap-in" or with the keyboard shortcut ctrl+M
  • Open "Certificates" by double clicking it → Let the computer account to manage the certificates
  • Install the certificates on the local computer
  • To open the Snap-in just click "OK" at the end of these steps

Image Added  Image Added  Image Added  Image Added

Step 2 - Install the certificate

...

To add the certificate you have to enter the password of the certificate, which was generated at the export. After you have done this, you need to choose the folder, where you want to add the certificate. In the normal case this is the folder "Personal". Click "Next" to continue. 

To complete the changes click "Finish". Confirm all your changes by clicking "OK" in the popup window that will open.

Image Added

Step 3 - Proof the recently added certificate

Navigate to the certificate, which you added before, in the certificate store. Double click on the certificate and check the path and the status of the certificate.

Image Added


Step 4 - Service User rights

Navigate to the certificate and do a right click on it "→ All Tasks → Manage private key" to manage the private key. Give full control to the service user on the certificate. Apply these changes with "OK"

Image Added

Step 5 - Optional

Export public certificate to install it on an other server.

Install the exported public certificate on all communication-partners like: Web-Server, system connector, aso.

Do the same on all communication-partners. Export their public certificate and add it on the server.



1

MMC

Start → MMC
Bildergebnis für windows logo png + R | mmc

2

Add Certificate Snap-In...

Neue Snap-in laden über
File Add/Remobe Snap-in.. 
oder Ctrl+M


Load a new snap-in by clicking "Add/remove Snap-in" 

or Ctrl + M (keyboard shortcut)








Certificates
Double click "Certificates"

3Account

Choose "Computer account"

4Local Computer 

Click "Finish"

5Add Certificate Snap-In

Confirm by clicking "Ok"

6

Install certificates

Navigate to "Personal" → certificates import
Right click → All Tasks → Import

7Certificate Import

Click Next

8

File Import


Choose the certificate you want to add by clicking "Browse..."

9

File Import


Indicate the password for the private key.

Confirm the password by clicking "next"

10

Cerificate Store


Choose the certificate store, where the certificate will be saved.
After that you can click "Next"

11 Completing the Import Wizard

Click finish

12Import was successful

Confirm the changes with "OK"

13Control the certificate

Double click on the certificate
Certification Path → Certificate status

14

Service User rights


Right click on the certificate

→ All Tasks → Manage Private Keys

15

Service Account auf das eingelesene Zertifikat berechtigen:

  • Full Control 
  • Read


Apply → OK

16

Optional: 

Export public certificate to install it on an other server.

Install the exported public certificate on all communication-partners like: Web-Server, system connector, aso.

Do the same on all communication-partners. Export their public certificate and add it on the server.



...