Page History

...

IDERA users in environments that have not yet added a certificate signed by a Certification Authority (CA) receive a warning message in their browser each time they attempt to open the SSL version of the IDERA Dashboard. Note that the default certificate provided with an IDERA product is not signed by any well-known CA and is intended only for use in testing purposes ONLY. You can resolve this issue by adding a signed CA using the steps provided in Run IDERA Dashboard over TLS (HTTPS), or you can use the following steps to resolve this issue at no certificate cost.To resolve the certificate message at no cost

Adding a self-signed certificate

Creating a Certificate

1. Download the free KeyStore Explorer utility from the following website:

   Newtab2
   alias http://keystore-explorer.sourceforge.net/ url http://keystore-explorer.sourceforge.net/

   Install the utility and install it.
2. Open KeyStore Explorer. KeyStore Explorer displays the following Quick Start options. On launch, it may ask you to download an updated Java Cryptography Extension (JCE) Unlimited Strength file.
   Image RemovedImage Added
3. Click Open the KeyStore Explorer console by clicking Open an existing KeyStore. KeyStore Explorer displays the Open KeyStore window.
4. Browse to the IDERA Dashboard \ conf directory(e.g. , the default path is  C:\Program Files\Idera\Dashboard\WebApplication\conf), and then open the keystore file.
   Image RemovedImage AddedKeyStore Explorer displays
5. On the Unlock KeyStore window.In the Enter Password field of the Unlock KeyStore window, type:
   password
   dialog, enter "password" and then click OK.
   Image RemovedImage Added
   KeyStore Explorer displays a list of any existing certificates, as shown in the following image.
   Image RemovedImage Added
6. Create To create a new key pair by selecting the existing key, and then clicking the click  Generate Key Pair icon, as shown in the following image.
   Image RemovedImage Added
7. In On the Generate Key Pair window, verify the proper algorithm is selected, and then click OK.
   Image RemovedImage Added
   KeyStore Explorer begins to generate a new key pair
   Image Removed
   and then displays
   
8. On the Generate Key Pair Certificate window.In the Generate New Pair Certificate window, make the following changes:
   Image Added
   • In the Signature Algorithm list, select SHA-1 with RSA or SHA-256 with RSA. This example uses SHA-1 with RSA.
   • In the Validity Period fields, select field set the number of years the certificate is valid. This , this example uses 5 years, and click Apply.
   • Click the Edit Name button to open the Name window.
9. On the Name window Click the Edit Name icon to enter identifying information. In the Name dialog icon to enter identifying information.
   Image Removed
   KeyStore Explorer displays the Name window.In the Name window, complete each of the available fields. The entry in the Common Name (CN) field should correlate with the name of the website.
   In essence, the name that you provide should match the URL that you intend to use. For example, the following image shows an entry that creates a certificate for https://localhost. For more information on each field refer to

   Newtab2
   alias Distinguished Name Fields url https://msdn.microsoft.com/en-us/library/windows/desktop/aa381979(v=vs.85).aspx

   Image Removed
   Click OK. KeyStore Explorer displays the New Key Pair Entry Alias window.
   Image Removed
   Image Added
   Once you fill your information click OK.
10. On the Generate New Pair Certificate window click Add Extensions.
    Image Added
11. On the Add Certificate Extensions window, click  Add Image Added
    Image Added
12. On the Add extension Type dialog select Subject Alternative Name and click OK.
    Image Added
13. On the Subject Alternative Name Extension dialog, click the Add Image Added.
    Image Added

14. On the Alternative Name dialog, select DNS Name. In the General Name Value field, enter the Fully Qualified Domain Name of the server on which the IDERA Dashboard exists. Click OK on all windows to save your changes.

    Image Added
15. On the New Key Pair Entry Alias dialog, verify Verify that the displayed alias matches the name of your website , and then click OK.
    Image Added

16. KeyStore Explorer displays the New Key Pair Entry Password window.

    Type and confirm the password you want to use for the key pair, and then click OK.

    Note
    This password must match the password entered in step 65.

    In this case, type the following password in both input boxes:
    password
    Image Removed
    KeyStore Explorer displays a message stating that the key pair generation is successful.Image Added

17. Verify Click OK to close the success window, and then verify the new line in the KeyStore Explorer certificate list, as shown in the following image.
    Image RemovedImage AddedDelete
18. To delete the old certificate by selecting select the appropriate line, and then clicking the Cut icon, as shown in the following image.
    Image Removed
19. Click the Save icon, as shown in the following image.
    Image Removed
20. click Cut. If you get a Pasword requement use the one from step 5.
    Image Added
21. Save the changes to the keystore file.
    Image AddedRestart the IDERA Dashboard Web Application service.
22. Double-click on the certificate that you created to see the details, verify your details and click Export.
    Image RemovedImage Added
23. Click On the Export and Certificate dialog save the certificate to conf directory in the IDERA Dashboard conf directory (e.g. C:\Program\Files\Idera\Dashboard\WebApplication\conf\)
    Image Removed

24. Click OK on the certificate details window to close it.
    Image Removed

25. Open Certificate Manager by pressing Win+R to summon the Run dialog box, type certmgr.msc, and press ENTER.

    If you are prompted for an administrator password or confirmation, type the password or provide confirmation.
    Image Removed

26. Right-click on the Trusted Root Certification Authorities > Certificate node and select All Tasks > Import.
    Image Removed

27. On the Certificate Import Wizard, click Next.
    Image Removed

28. Select the certificate that was exported and click Open.
    Image Removed

29. Click Next.
    Image Removed

30. Select Place all certificates in the following store. The correct store would be Trusted Root Certificate Authorities. Then click next.
    Image Removed
31. Click Finish.
    Image Removed
32. Select Yes.
    Image Removed
33. Click Ok on the confirmation window.
    Image Removed
At this point, you will need to close any browser that is open and then attempt to access the IDERA Dashboard.
Image Removed
34. Image Added
35. Return to the main KeyStore Explorer window and close the application.
36. Restart the Idera Dashboard Core Service and Idera Dashboard Web Application Service.

Adding a certificate

To add a certificate to the Trusted Root Certification Authorities store in Windows, refer to