Appliance Certificate Management

The Certificate Management feature is currently only available for the FlexDeploy Appliance.

This document refers to SSL (Secure Sockets Layer) as well as TLS (Transport Layer Security) generically as SSL. All appliance services using HTTPS will use TLS 1.2.


The Certificate Management feature allows users to supply a custom SSL certificate and private key for installation into a RISC Networks Appliance. By default, appliances use a self-signed SSL certificate and key pair that is generated during the bootstrap procedure. While this ensures that communication with the appliance via a web browser is encrypted, providing security and integrity of the transmitted data, it does not provide confirmation of identity between the client and the appliance, and results in a security warning when connecting. With Certificate Management, a certificate trusted either by the global PKI infrastructure or by internal Certificate Authorities, can be installed on the appliance. This provides confirmation of identity and removes the security warning.

RISC Networks does not guarantee the function of users' PKI related to the installation of a custom certificate. In particular, any issues related to the trust of an installed custom certificate are the responsibility of the user to resolve.


Using The Feature

To access the Credential Management feature, browse to the FlexDeploy appliance's configuration application, log in, and access the Interfaces page. The Certificate Management button can be found below the network interface configuration section. Next to the button will be a tag describing whether the default certificate (the self-signed automatically generated certificate), or a user supplied custom certificate is currently installed. Select the Certificate Management button.

Once viewing the Certificate Management page, detailed information about the currently installed certificate can be accessed using the View Certificate button. This will provide details such as the identity of the issuing certificate and the identity of the server certificate.

To install a custom certificate and key, populate the form fields in the Install a Custom Certificate section and select Verify And Apply. On the dialog, first select Verify. This will check the provided Server Name, Certificate Chain, and Server Key data to ensure that the configuration is correct. If the configuration does not pass the verification process, an error will be shown and the certificate and key will not be installed. If the configuration passes the verification process, selecting the Apply button will install the certificate and key on the system, and restart system services to begin using the new configuration.

If you would like to remove a custom certificate that has been installed, the Roll Back To Default button can be selected. This will remove the custom certificate and key from the appliance, install the default certificate and key, and restart the system services to use the default configuration. Once Roll Back To Default is selected, you will be asked to confirm that you would like to proceed with the operation. Once completed, in order to return to a custom certificate it will need to be re-entered and installed.

Certificate Format

The certificate and private keys provided for the Certificate Management feature have several requirements. Before installing a certificate and key, a verification process is run to confirm that these requirements are met.

  • Certificates and private keys must be encoded in the PEM format
  • Certificates and private keys must be compatible with OpenSSL and the Apache Web Server
  • The certificate and key must match each other
  • The Common Name of the certificate must match the Server Name provided in the configuration
  • The certificate must be a valid chain, containing the server certificate as well as any required signing certificates
  • The certificate chain must be ordered in terms of the trust chain from leaf to root, or server certificate to the root certificate

First, certificates and keys must be provided in the text-based PEM encoding. This format uses the Base64 text encoding to represent the certificate or key data, and contains header and footer lines describing the type of data it contains. The header and footer lines should be included in the certificate and key data when entering them into the Certificate Management feature.

The RISC Networks Appliances use the Apache Web Server and the OpenSSL cryptographic framework to provide HTTPS services. Certificates and keys provided for the feature must be compatible with this software stack. For more advanced compatibility concerns, please consult the upstream documentation for these projects. Links are available at the bottom of this page.

The server certificate contains a "subject" line describing the identity of the server, including a Common Name (CN) that identifies its name. When accessing the web application, the name used to contact the server must match the Common Name of the certificate it presents. Otherwise, an warning is issued by the browser. The Server Name field defined in a custom certificate installation must match the Common Name of the server certificate, which should also match the DNS name used to initiate a connection to the appliance. If the Server Name field does not match the Common Name of the certificate, the verification process will produce an error and the installation will not proceed.

The Certificate Management feature does not accept the certificate trust chain as a separate file. The Certificate Chain provided when installing a custom certificate must contain all certificates participating in the trust chain. Typically, this constitutes the server certificate, one or more intermediate signing certificates, and a root Certificate Authority certificate. If your PKI infrastructure currently has the CA bundle separate from the server certificate, they can be concatenated together into a single file. The order of certificates in the chain must be ordered from leaf to root, meaning the server certificate is the first entry in the file, followed by any intermediate signing certificates, and finally the root certificate. If the chain is not ordered in this way, the verification process will fail, typically due to the Server Name not matching the Common Name of the certificate, and installation will not proceed.

Examples

The following shows a valid certificate chain, including a server certificate, an intermediate signing certificate, and a root certificate, and the corresponding private key:

Example Certificate Chain
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Example Private Key
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

OpenSSL

Apache Web Server SSL/TLS Encryption