Installing a Custom Security Certificate

The ztC Endurance management server automatically initializes itself with a self-signed SSL certificate, allowing communications to the management server to be encrypted without the identity of the certificate holder being verified by a third party. To view details of this certificate, click the warning icon on the left side of the browser's address bar.

If you prefer to install a custom certificate on the server, run the cert_installer.exe command. You can also use this command to revert to the default certificate or to display the current certificate.

The cert_installer.exe command is located in C:\Program Files\Stratus\bin and must be run as Administrator. The installer requires a key file containing the private key in addition to the certificate file. Both files must have the .pem format.

Command usage:

C:\Program Files\Stratus\bin\cert_installer.exe

To Install/recover/display the Certificate: 

Usage: cert_installer.exe [Option]
-d 	displays current certificate
-r  	recovers to default certificate
-c 	[PATH to certificate.pem] -k [PATH to key.pem], installs the customer certificate
-h 	displays help
Note: The cert_installer.exe command automatically restarts the management server after any operation that changes the certificate, so you do not need to perform a manual restart after installation.

To install a custom certificate

  1. Copy your new, valid certificate and key .pem files from C:\Program Files\Stratus\bin to the Administrator home directory on the ztC Endurance system (for example, C:\Users\Administrator\Desktop\joseph).

  2. Issue the following command from Windows PowerShell to install the certificate:

    PS C:\Users\Administrator\Desktop\joseph\cert_installer.exe -c C:\Users\Administrator\Desktop\joseph\cert.pem -k C:\Users\Administrator\Desktop\joseph\key.pem

To revert to the default certificate

PS C:\Users\Administrator\Desktop\joseph\cert_installer.exe -r

To display information about the currently used certificate

PS C:\Users\Administrator\Desktop\joseph\cert_installer.exe -d