In Cordaware bestinformed you have the possibility to access your web interface via SSL.
The default port for the SSL secured connection is 8043.
Edit settings
By default, SSL-secured HTTP (HTTPS) access to the web interface is active and runs on port 8043. The settings for the SSL-secured connection on the Infoserver can be adjusted in the configuration file “infoclient.ini” via the Serverboard in the [ssl] section. Look for the “ssl” entry under the SSL settings. Double-click to edit the value. Set it to "false" to disable SSL-secured access, and to "true" to enable it. Then save the changes by pressing the Enter key and restart the service for the web interface so that the changes take effect. The service can also be restarted via the web interface in the Serverboard using the red Webinterface (server) reboot button.
Import your own certificates
In order to implement the certificates for the secured connection to the web interface, proceed as follows:
1.) Store your certificates in the installation folder of Cordaware bestinformed. The certificate and its according key need to be stored in the installation folder of Cordaware bestinformed (Default path: C:\Program Files\Cordaware\best_web\etc\ssl)
|
Please note:
Please make sure that the certificate and the corresponding key are saved in Base64-encoded format! (e.g., .pem, .crt, .key)
If you have your certificates in PFX format, you can find instructions on how to convert them in the chapter SSL / HTTPS. |
2.) Now you can adjust the names of the certificates. Open the app Serverboard (System -> Serverboard) on the web interface of Cordaware bestinformed. In the SSL settings tab you can find the names which need to be adjusted according to the names of your certificate / key.
By default the certificate / key have the following names:
key_file (Private key of the certificate) |
best_key.pem |
cert_file (Name of the certificate) |
best_cert.pem |
3.) [optional] If you are using a certification authority, a certificate and key for the CA will be necessary.
Save the key and certificate for the CA in the folder C:\Program Files\Cordaware\best_web\etc\ssl as well.
After you have stored your files, reopen the serverboard and add a new entry to the ssl section. The key will be cacert_file and the value is the name of your CA certfile in the .pem format.
After you have adjusted your settings, the Cordaware_bestinformed_best_web service needs to be restarted in order to save and apply your changes.
You can then access the webinterface of Cordaware bestinformed via the port 8043.
|
Please note:
Please note that the certificates also need to be installed on the computers of your users. You can install your certificates via group policies for example. |
If the access to the private key is secured via password, you can find a guide on how to chance the used password in the chapter SSL Password.