5 Obtaining & Importing the CSR Certificate

This section covers how to obtain, import, configure, and test the CSR Certificate.

 

 

ABOUT OBTAINING A CSR & CERTIFICATE

 

The end-user MUST purchase an SSL Certificate as a part of the security measures in a live/production environment.

• The SSL Certificate will encrypt the communications between the Mobile Apps and the Web API Server. 
• The SSL Certificate will reside on the same communication server where the GCS Web API Service is running.

 

You must submit a Certificate Signing Request ( CSR ) to a Certificate Authority who will issue a secure digital SSL Certificate for a cost.

IMPORTANT: You must remember where the Certificate is imported!!! (notate which branch in the Certificate Store the certificate is installed).

 

PURCHASE THE SSL CERTIFICATE

When purchasing an SSL Certificate, you must create a Certificate Signing Request from a Certificate Authority (CA) of your choosing (such as Comodo, GoDaddy, Semantic, Verisign, etc.). They will assist you in generating a CSR on your local machine/server where the web services are installed/running (Comm Server).  SEE MORE ...

 

IMPORTANT: Consider the certificate lifespan. The mobile apps will stop working when the Certificate expires.

IMPORTANT: Self-signed certificates will not work in a live/production environment.

IMPORTANT: During installation you must notate the path or location where the certificate is installed in the certificate store .

NOTICE: Galaxy Control Systems makes no recommendations as to which brand will provide the best security or best value.    

 

 

IMPORT THE SSL CERTIFICATE INTO THE CERTIFICATE STORE

Once the Certificate has been purchased, the integrator or end-user will import the Certificate onto the GCS Communication Server where the GCS Web API Service resides. .  SEE MORE ...

IMPORTANT: Remember where the Certificate is installed (which branch in the Certificate Store it is located).  Contact the Certificate Authority for technical assistance with importing their certificate.

 

ABOUT VERIFYING THE PRIVACY KEY

 

Once the Certificate has been imported into the certificate store, user must verify that a “key” symbol is visible on the Certificate icon.  .  SEE MORE ...

• If this is the first attempt at importing, it should have the key.
• If you are re-importing it for some reason, you might need to generate the privacy key manually.

 

The SSL Setup Batch file will fail if a private key is not on the Certificate.