Administration: Difference between revisions

Jump to navigation Jump to search
Update the ssl/tls-description to the options we brought in with 3.6
(Update the ssl/tls-description to the options we brought in with 3.6)
Line 35: Line 35:
=== TLS/SSL certificate ===
=== TLS/SSL certificate ===


The appliance comes with a pre-installed generic TLS certificate but an own certificate can be installed or downloaded from a Certificate Authority.
The appliance comes with a pre-installed generic TLS certificate but a custom certificate can be uploaded, generated (since 3.6) or downloaded from a Certificate Authority (since 3.6).
You are able to choose between three modes:
 
* Default Mode: The default certificates the appliance got shipped with will be used.
Depending on your firmware-version there are two to four possibilities:
* ACME-Mode: The Certificates will be downloaded from the specified Certificate Authority  
 
* File-Mode: You are able to upload a X.509 certificate file and a RSA key file. Upon successful upload, this certificate will be used to serve the user interface.
==== Before 3.6: ====
There are two options:
 
* You are able to use the certificates the appliance got delivered with. (You are able to reset to that with the Reset-Button)
* You are able to upload a X.509 certificate file and a key file. Upon successful upload, this certificate will be used to serve the user interface.
 
==== Since 3.6: ====
There are four modes:
* Legacy: The default certificates the appliance got shipped with will be used if the appliance got shipped with an older firmware than 3.6. You won't be able to switch back to this option and it will be hidden if it is not selected.
* ACME: The Certificates will be downloaded from the specified Certificate Authority
* Upload: You are able to upload a X.509 certificate file and a key file. Upon successful upload, this certificate will be used to serve the user interface.
* Self-Signed: Self-Signed: Generate self-signed certificates with a custom hostname. They will be valid for 10 years and replace the legacy certificates for devices shipped with firmware version 3.6 or later.
The Default Mode is always the fallback if the process does not work.
The Default Mode is always the fallback if the process does not work.
The '''Reset to default SSL certificate''' button will remove any user-provided SSL certificate and the user interface will be served using the default SSL certificate.
The '''Reset to default SSL certificate''' button will remove any user-provided SSL certificate and the user interface will be served using the default SSL certificate.
59

edits

Navigation menu