Contents
Cirrus Link Resources
Cirrus Link Website
Contact Us (Sales/Support)
Forum
Cirrus Link Modules Docs for Ignition 7.9.x
Inductive Resources
Ignition User Manual
Knowledge Base Articles
Inductive University
Forum
Page History
SSL/TLS Enable the Ignition Web Server
Self-signed certificates can be used with Ignition and the Cirrus Link modules and they are useful for testing environments and non-public networks.
...
Ignition has made it simple to load a self-signed certificate through the Setup SSL / TLS wizard but there are additional steps needed to create and use a CA Chain certificate Certificate chain with the MQTT modules. .
The CA Certificate chain will comprise of all Intermediate CA certificates, in order, and the Root CA concatenated into a single cert file.
SSL/TLS Enable the Ignition Web Server
Review the following list for the required certificates:
...
You will be warned of a Potential Security Risk and will need to Accept the Risk and Continue
Once configured, you will be able to view the SLL/TLS Certificate details which should be displayed similar to the image below:
...
Create the CA Chain Certificate
...
Construct the CA Certificate chain by concatenating the Intermediate CA file with the Root CA file into a new file.
| Note |
|---|
| The Intermediate CA file should be fisrt in thsi file. If you have multiple Intermediate CA certs then add them in order before adding the Root CA cert. |
In this example, we have a single Intermediate CA which is the concatenated with a Root CA
| Code Block | ||||
|---|---|---|---|---|
| ||||
-----BEGIN CERTIFICATE-----
MIIF3TCCA8WgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwgYQxCzAJBgNVBAYTAlVT
......
HPdMojd3CnsdLcqfzt582nxlGbfYwpR3Y5XeMSHST2Wq1FLVLA3HE5iLtQAL0bwv
NfKkNSLtui2QpCV0dwY8XX8=
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIF8DCCA9igAwIBAgIJAK7yLN2Y9PrMMA0GCSqGSIb3DQEBCwUAMIGEMQswCQYD
.....
CRTeBexRtq4VSm/Oi5fIT+euBLZTTsDdF+sxzJi9TP60Y0tD
-----END CERTIFICATE----- |
| Tip |
|---|
| If you do not have access to or cannot easily locate your Intermediate and/or Root CA Certificates, follow the steps in How do I find the Self-Signed Certificates loaded for Ignition. |
Upload
...
CA Certificate chain
The MQTT Engine and MQTT Transmission modules will both require the CA Certificate chain to be upload and applied. Navigate to the Servers > Certificates section for each module and select Create New Certificate.
...
Overview
Content Tools