Appliance Certificate Management
Note:This document refers to SSL (Secure Sockets Layer) as well as TLS (Transport Layer Security) generically as SSL. All appliance services using HTTPS will use TLS 1.3.
With the Certificate Management feature, you can supply a custom SSL certificate and private key for installation into a RISC Networks Appliance. By default, appliances use a self-signed SSL certificate and key pair that is generated during the bootstrap procedure. While this ensures that communication with the appliance via a web browser is encrypted, providing security and integrity of the transmitted data, it does not provide confirmation of identity between the client and the appliance, and results in a security warning when connecting. With Certificate Management, a certificate trusted either by the global PKI infrastructure or by internal Certificate Authorities, can be installed on the appliance. This provides confirmation of identity and removes the security warning.
Important:RISC Networks does not guarantee the function of users' PKI related to the installation of a custom certificate. In particular, any issues related to the trust of an installed custom certificate are the responsibility of the user to resolve.