8.
Installing an SSL Certificate
Up one level
SSL is provided with Hosted Solutions. Firms using Local Solutions may also wish to use SSL, and, if so, will likely wish to install an SSL certificate.
Installing a certificate will allow users to avoid the dialog asking users if they will accept the certificate when accessing an OpenEngagement site that uses SSL through a web browser. Some firms may wish to keep this dialog, as it is a simple means to confirm the OpenEngagement server is, in fact, using SSL. Others may wish to remove this dialog. It is displayed because Internet Explorer, Firefox and other web browsers have, by default, only a small number of recognized Certificate Authorities. If these instructions are not sufficient, additional information may be found on-line as well, as this is common administrative task with secure websites.
Note: These steps require a .pem file, which may be supplied by OpenEngagement. This file actually contains an RSA key and certificate. When installing this via these instructions, only the certificate part of the file is needed. Therefore, users will need to delete everything in the file before "-----BEGIN CERTIFICATE".
Installing a Certificate
To use the OpenEngagement CMS without being prompted with certificate security warnings every time you visit the page, you will need to install the OpenEngagement security certificate. Installing the certificate will allow your browser to accept that you have deemed the OpenEngagement CMS secure and that the browser does not need to ask if you wish to continue every time you visit.
You will need to manually set up your web browser to accept the certificate. The method of configuring your web browser is outlined below for Internet Explorer and Firefox.
Internet Explorer
First, open Internet Explorer. Once the browser is open, open up Internet Options (Tools | Internet Options) and click on the Content tab.
Next, click the Certificates… button near the centre of the window.
Now click the “Trusted Root Certification Authorities” tab at the top of the window.
Click the Import button.
On the first new windows that welcomes you to the Certificate Import Wizard, you can just click the Next button. You should read the information before clicking Next if you want more information about exactly what you are doing.
After clicking next, click on the Browse button on the new window.
In this window, you will first need to set the Files of type option to All Files (*.*)
Now, you will need to Browse to the location of the permissions file. This will be stored in the OpenEngagement directory. The name of the file will be apache.pem or just apache.
After selecting the certificate you want to use, clicking open, then clicking next, you will be presented with a new window. On this window, you need to set it to place all certificates in the “Trusted Root Certification Authorities”. If your screen does not show “Trusted Root Certification Authorities” like it does in the screen-shot, you may need to click the Browse button and select “Trusted Root Certification Authorities” and click OK. After ensuring the box says “Trusted Root Certification Authorities”, click next.
After this, you might be presented with a security dialog. This dialog may also appear after clicking Finish at the next step. Either way, click Yes at this dialog as long as it identifies the certification authority as “www.openengagement.com”
That’s all there is to it, just click Finish and you are done. When accessing the OpenEngagement DMS from now on, there should be no more prompts asking you if you are sure this website is secure.
Firefox
First, open Firefox. Once the browser is open, open up Options (Tools | Options) and click on the Advanced button and click the Security tab. Now click the View Certificates button
Now click the “Authorities” tab at the top of the window and then click the Import button.
Now click on the Browse button and browse to the location of the permissions file. This will be stored in the OpenEngagement directory. The name of the file will be apache.pem or just apache.
At the “Downloading Certificate” dialog, check all three check-boxes before clicking the OK button.
That’s all there is to it. When accessing the OpenEngagement DMS from now on, there should be no more prompts asking you if you are sure this website is secure.