Image Added

3VR VisionPoint REST API SSL Certificate Upload

Uploading REST API SSL Certificate

Overview

SSL Certificates provide a trusted relationship between 3VR Enterprise Server and its Appliances. The server establishes trust by sending a trusted certificate with certificate key to the Appliances.

Purpose

To upload REST API SSL Certificate from 3VR VMS System Manager or Appliances into embedded 3VR Appliances.

To upload REST API SSL Certificate from System Manager:

1. Login to 3VR Enterprise Server using your credentials. Open System Manager.
2. Click Maintenance ->Update Software.
3. Select Appliance Upgrade.
   

   You must see the appliances list configured under your 3VR VMS Server for your Device as shown in the Figure below.

   Image Added

4. Select the Appliances for which you wish to upload the SSL Certificates and click Inspect.
   

   The Appliances status changes to OK and the Upload Certificate button gets enabled.

   Info
   SSL certificates can only be uploaded to Appliances having OK status change and with Upload Certificates enabled as shown in Figure 2 below.

   Image Added

5. Click Upload Certificate.
   The Choose 3VR Update file dialog box displays a list of CA Authority as shown in the Figure below.
   Image Added

6. Select the valid .PFX file and click OK.

   Note
   Valid certificate keys from GoDaddy (Web Hosting Company) with *.3vr.net wild card patterns are supported within 3vr.net Domain.

   
   

7. When prompted, enter the correct SSL certificate password and click Save as shown in the Figure below.
   Image Added

   Note
   The .PFX file contains the SSL certificate’s public and private keys. A password is created by the user during the export process and the same password is required while importing the certificate. “3MeDeee” is the default Techrep user account password.

   
   

   Note
   Now, the SSL certificate we have chosen is uploaded to the respective appliances. The status shows “unreachable” because after uploading the certificate key we have to STOP/START web services on individual appliances. This takes couple of seconds to resume the service as shown in the Figure below.

   
   

8. Click Update Software tab in System Manager as shown in the Figure below.
   Image Added
9. After few seconds, click Inspect again to confirm if the appliance status is “OK” as shown in the Figure above.
10. Access the URL with valid domain. The URL format is

• <<https://appliancename.domainname:8080/livevideo/channelnumber >>
• Example, << https://003-6450200.3vr.net:8080/livevideo/18 >>

Now, you will see the secure https connection.

Appendix A: Troubleshooting Unsuccessful .PFX File Upload

Under certain scenarios, the .PFX file upload is unsuccessful, when the user enters a password that is not matching with the .PFX credentials received from the Certificate Authority.

The user may encounter an error message “ Cannot import pfx file. Your password is incorrect for this file or the certificate has expired”
The solution is to enter a valid password and upload the SSL Certificate again.

A PDF copy of this REST API SSL Certificate Upload Guide is attached for your quick reference. Please do not leave this publication attached as part of the official web document.