eScan BlogeScan Blog    eScan WebsiteeScan Website    eScan ForumeScan Forum    eScan FeedseScan Feeds     
    
Languages:     

From eScan Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 11:05, 29 August 2018
WikiSysop (Talk | contribs)
('''How to generate a SSL certificate using Certificate Authority (CA)''')
← Previous diff
Current revision
WikiSysop (Talk | contribs)
('''How to generate a SSL certificate using Certificate Authority (CA)''')
Line 58: Line 58:
   
-<li>Create the directory structure on your server. This is required for the SSL verification process. (Steps to create directory structure).</li>+<li>Create the directory structure on your server. This is required for the SSL verification process..</li><br>
 +'''Note:'''<br>
 +1. Steps to create directory structure are provided in the '''"Steps to create directory structure"''' section below.<br>
 +2. After completing the steps 1-7 in the '''"Steps to create directory structure"''' section return to Step 15 of this section.<br>
 + 
<li>Once this is done, click on "Next" to proceed with the verification.</li> <li>Once this is done, click on "Next" to proceed with the verification.</li>
Line 77: Line 81:
<ol> <ol>
<li> The customer can generate a SSL Certificate using NO-IP domain, however, it is strongly NOT RECOMMENDED to do so. </li> <li> The customer can generate a SSL Certificate using NO-IP domain, however, it is strongly NOT RECOMMENDED to do so. </li>
-</ol>+</ol><br><br>
 +<div id="test"></div>
'''Creating a directory structure for SSL verification process''' '''Creating a directory structure for SSL verification process'''
Line 87: Line 92:
C:\Program Files (x86)\Common Files\MicroWorld\apache2\conf (64-bit OS)<br> C:\Program Files (x86)\Common Files\MicroWorld\apache2\conf (64-bit OS)<br>
<br> <br>
-'''Step 3:''' Download the SSL_files.zip from the link (SSL_files.zip) and unzip the files. <br>+'''Step 3:''' Download the '''SSL_files.zip''' from the link [http://download1.mwti.net/download/SSL/SSL_files.zip SSL_files.zip] and unzip the files. <br>
-Copy the file httpd_SSL_x86.conf to the apache2\conf directory of a 32-bit OS. <br>+Copy the file '''httpd_SSL_x86.conf''' to the '''apache2\conf''' directory of a 32-bit OS. <br>
-Copy the file httpd_SSL_x64.conf to the apache2\conf directory of a 64-bit OS.<br>+Copy the file '''httpd_SSL_x64.conf''' to the '''apache2\conf''' directory of a 64-bit OS.<br>
<br> <br>
-'''Step 4:''' Create the said directory structure as per Verification page of "ZeroSSL" website "FREE SSL Certificate Wizard" ie: .well-known\acme-challenge +'''Step 4:''' Create the said directory structure as per Verification page of "ZeroSSL" website "FREE SSL Certificate Wizard" ie: '''.well-known\acme-challenge'''
To create directory, go to the apache2 directory.<br> To create directory, go to the apache2 directory.<br>
Line 97: Line 102:
C:\Program Files (x86)\Common Files\MicroWorld\apache2 (64-bit OS)<br> C:\Program Files (x86)\Common Files\MicroWorld\apache2 (64-bit OS)<br>
-md .well-known\acme-challenge+'''md .well-known\acme-challenge''' <br>
 +'''(It is recommended to copy/paste the command, to avoid mistakes)'''
 + 
<br> <br>
'''Step 5:''' Copy the file downloaded from the Verification page of "ZeroSSL" website "FREE SSL Certificate Wizard" to the <br> '''Step 5:''' Copy the file downloaded from the Verification page of "ZeroSSL" website "FREE SSL Certificate Wizard" to the <br>
Line 107: Line 114:
C:\Program Files (x86)\Common Files\MicroWorld\apache2\.well-known\acme-challenge (64-bit OS)<br> C:\Program Files (x86)\Common Files\MicroWorld\apache2\.well-known\acme-challenge (64-bit OS)<br>
<br> <br>
-'''Step 6:''' Go to the apache2\bin directory and execute the below command to start a new apache server instance.<br>+'''Step 6:''' Go to the '''apache2\bin''' directory and execute the below command to start a new apache server instance.<br>
-httpd -f "C:\Program Files\Common Files\MicroWorld\apache2\conf\httpd_SSL_x86.conf" (32-bit OS)<br>+'''httpd -f "C:\Program Files\Common Files\MicroWorld\apache2\conf\httpd_SSL_x86.conf"''' (32-bit OS)<br>
-httpd -f "C:\Program Files (x86)\Common Files\MicroWorld\apache2\conf\httpd_SSL_x64.conf" (64-bit OS)<br>+'''httpd -f "C:\Program Files (x86)\Common Files\MicroWorld\apache2\conf\httpd_SSL_x64.conf"''' (64-bit OS)<br>
To check if the instance is started and working, open a new tab in the browser and visit.<br> To check if the instance is started and working, open a new tab in the browser and visit.<br>
-http://emm.mycompany.com/.well-known/acme-challenge/index.htm<br>+emm.mycompany.com/.well-known/acme-challenge/index.htm<br>
Which should display the string "Welcome to SSL verification"<br> Which should display the string "Welcome to SSL verification"<br>
<br> <br>
'''Step 7:''' Once the file is copied and the apache server instance has started, <br> '''Step 7:''' Once the file is copied and the apache server instance has started, <br>
-Open a new tab in the browser and visit http://emm.mycompany.com/.well-known/acme-challenge/FILENAME <br>+Open a new tab in the browser and visit emm.mycompany.com/.well-known/acme-challenge/FILENAME <br>
(Which was created in this folder for the purpose of SSL Verification via HTTP on ZEROSSL website.)<br> (Which was created in this folder for the purpose of SSL Verification via HTTP on ZEROSSL website.)<br>

Current revision

How to generate a SSL certificate using Certificate Authority (CA)

The scope of this document is to generate a SSL certificate using one of the many Apple Approved Certificate Authority (CA).

Note: Make sure you check and go through the below link before proceeding further
http://wiki.escanav.com/wiki/index.php?title=Escan/english/escan11/eScan_Management_Console/EMM/Pre-Requisites_Managing_iOS_Devices

We have used letsencrypt.com CA to generate a free SSL certificate. There might be other CA websites available which provide free SSL certificate. The steps will change for other providers so kindly check the respective website for the exact steps.

  1. Decide on the Domain-Name or the Sub-domain. e.g. emm.mycompany.com or mydomain.ddns.net. If you already have the EMM server running and you are using a ddns domain name, you can use the same.

  2. Go to https://zerossl.com/

  3. Click "Online Tools"

  4.  

     

  5. Click "Start" on the "Free SSL Certificate Wizard" page.
  6.  

     

  7. Add email address so that you can get a notification about the expiration of the certificate.
  8. Add the Domain name/Sub-domain for which the certificate has to be generated or you can paste the CSR (Certificate Signing Request) if you already have one.
  9. Select HTTP verification
  10. Select both the check boxes to accept the TOS.
  11.  

     

  12. Click on "Next" and select "No" at the "Include www-prefixed version too?" prompt. CSR file will be generated.
  13.  

     

  14. Download and Save the CSR that is generated.
  15. Click on "Next", an Account key will be generated.
  16.  

     

     

     

  17. Download and Save the Account key that is generated.
  18. Click on "Next'
  19.  

     

  20. Create the directory structure on your server. This is required for the SSL verification process..

  21. Note:
    1. Steps to create directory structure are provided in the "Steps to create directory structure" section below.
    2. After completing the steps 1-7 in the "Steps to create directory structure" section return to Step 15 of this section.

  22. Once this is done, click on "Next" to proceed with the verification.

  23.  

     

  24. After successful verification, a certificate and a Private key will be generated.
  25. Download and Save the Certificate and the Private key file which will be used in eScan console when you start with iOS.
  26.  

     

Recommendations:

  1. The customer can generate a SSL Certificate using NO-IP domain, however, it is strongly NOT RECOMMENDED to do so.


Creating a directory structure for SSL verification process

Step 1: Open cmd in elevated mode.
Step 2: Go to the apache2\conf directory.
C:\Program Files\Common Files\MicroWorld\apache2\conf (32-bit OS)
C:\Program Files (x86)\Common Files\MicroWorld\apache2\conf (64-bit OS)

Step 3: Download the SSL_files.zip from the link SSL_files.zip and unzip the files.
Copy the file httpd_SSL_x86.conf to the apache2\conf directory of a 32-bit OS.
Copy the file httpd_SSL_x64.conf to the apache2\conf directory of a 64-bit OS.

Step 4: Create the said directory structure as per Verification page of "ZeroSSL" website "FREE SSL Certificate Wizard" ie: .well-known\acme-challenge

To create directory, go to the apache2 directory.
C:\Program Files\Common Files\MicroWorld\apache2 (32-bit OS)
C:\Program Files (x86)\Common Files\MicroWorld\apache2 (64-bit OS)

md .well-known\acme-challenge
(It is recommended to copy/paste the command, to avoid mistakes)


Step 5: Copy the file downloaded from the Verification page of "ZeroSSL" website "FREE SSL Certificate Wizard" to the
C:\Program Files\Common Files\MicroWorld\apache2\.well-known\acme-challenge (32-bit OS)
C:\Program Files (x86)\Common Files\MicroWorld\apache2\.well-known\acme-challenge (64-bit OS)

Also, copy the index.htm file to the below path, you will get the file from SSL_files.zip as downloaded in Step 3.
C:\Program Files\Common Files\MicroWorld\apache2\.well-known\acme-challenge (32-bit OS)
C:\Program Files (x86)\Common Files\MicroWorld\apache2\.well-known\acme-challenge (64-bit OS)

Step 6: Go to the apache2\bin directory and execute the below command to start a new apache server instance.
httpd -f "C:\Program Files\Common Files\MicroWorld\apache2\conf\httpd_SSL_x86.conf" (32-bit OS)
httpd -f "C:\Program Files (x86)\Common Files\MicroWorld\apache2\conf\httpd_SSL_x64.conf" (64-bit OS)

To check if the instance is started and working, open a new tab in the browser and visit.
emm.mycompany.com/.well-known/acme-challenge/index.htm

Which should display the string "Welcome to SSL verification"

Step 7: Once the file is copied and the apache server instance has started,
Open a new tab in the browser and visit emm.mycompany.com/.well-known/acme-challenge/FILENAME
(Which was created in this folder for the purpose of SSL Verification via HTTP on ZEROSSL website.)

Check if it works as expected as mentioned on the Verification page of "ZeroSSL" website "FREE SSL Certificate Wizard".

 

 


eScan Copyright © 2015 MicroWorld Technologies Inc.- AntiVirus & Content Security.       Send your feedback to solutions@escanav.com eScan Wiki

    Privacy policy  About eScan Wiki  Disclaimers   This page has been accessed 585 times.