.. _ssl-certificate:

SSL Certificate Error Window on Web Console Access
============================================

Symptoms
-----------

Certificate error window appears when accessing Genian NAC WEB Console

Cause
-------------

Problem occurring due to not using a certificate issued by a trusted Certificate Authority.

Solution
--------------

Register a certificate issued by a trusted Certificate Authority.

Registering a Pre-issued Public Certificate
'''''''''''''''''''''''''''''''''

This is the process of registering a certificate issued by a trusted authority to perform HTTPS connection using TLS, a secure channel.

#. In the top panel, select **Settings > Preferences**.
#. In the left menu, go to **Certificate Management**.

.. list-table::
   :widths: 10 30
   :header-rows: 1

   * - Item
     - Description
   * - CA Certificate
     - Registers a public-key infrastructure certificate with the CA (Certificate Authority).
   * - Server Certificate
     - Registers a public-key infrastructure certificate used on the server.
   * - Server Key File
     - Registers the private key corresponding to the server certificate.
   * - Server Name
     - Enter the domain specifying the server.

.. note:: After certificate registration, a service restart is required for it to be applied to the server. Please refer to the Web service restart provided in the :ref:`service-control` section.

Obtaining and Registering a Public Certificate
''''''''''''''''''''''''''''''''''''''

#. Go to Settings in the top panel.
#. In the left Preferences menu, select Certificate Management > SSL Certificate.

**Creating a Certificate Signing Request**

After entering the required information in the Certificate Signing Request (CSR), you can generate a CSR including the server's public key.

Administrators can create a CSR in the Web Console and request a certificate from a Certificate Authority based on that CSR.

#. Enter the required information for the Certificate Signing Request (CSR).
#. Click the Generate Certificate Signing Request (CSR) button.
#. Copy the generated code from the Certificate Signing Request (CSR).
#. Request certificate issuance from the Certificate Authority using the Certificate Signing Request (CSR).


.. list-table::
   :widths: 3 10
   :header-rows: 1

   * - Item
     - Description
   * - Hostname
     - Enter the domain of the server to be accessed by user endpoints.
   * - Country Code
     - Enter the 2-digit country code designating the country.
   * - Company/Organization Name
     - Enter the company or organization name to be displayed on the certificate.
   * - Email
     - Enter the email to be displayed on the certificate.

**Registering the Issued Certificate**

Register the certificate issued via the Certificate Signing Request (CSR) requested from the Certificate Authority to the server.

#. Step 2: In the Certificate Registration section, enter the hash value of the issued certificate.
#. Click the Register button.

.. note:: After certificate registration, a service restart is required for it to be applied to the server. Please refer to the Web service restart provided in the :ref:`service-control` section.