Accessing web clients through HTTPs - SSL certificate

The most secure way to launch atvise web clients is through HTTPs. To do so, you need to load a valid SSL certificate in the atvise HTTPs web server. This SSL certificate should be issued by a Certification Authority. In this article, you can find the necessary steps to do it:

1. Create a domain

You should create a domain that points to the IP address of your atvise server. In our case, we create the domain test.vestersl.com. Only for test or demo purposes, instead of creating a domain, you might map a hostname to the IP address in the hosts file in your operating system. In Windows, it is located here: C:\Windows\System32\drivers\etc

2. Certify the domain

Now you have to use some Certification Authority that creates a valid SSL certificate for your domain. They should provide a certificate with the extension .crt, .der or .pem, and the private key with the extension .pem or .key. In our case, for test or demo purposes, we are using ZeroSSL Certification Authority:

2.1 Create a free account in ZeroSSL: https://app.zerossl.com/signup 

2.2 Create a New Certificate for your domain and then click on Next Step:

2.3 Select 90-Day Certificate and click on Next Step: 

2.4 Select Auto-Generate CSR and click on Next Step:

2.5 Select the Free Plan and click on Next Step:

2.6 Validate your certificate using one of the 3 possible options: Email Verification, DNS (CNAME) or HTTP File Upload. In our case, we select Email Verification and select one of the proposed emails that we know that exists in our domain:

2.7 Check the selected domain email account inbox and follow the instructions to verify the domain. After that, you will get a message with a link to download the certificate in the email account you used to create the ZeroSSL account. Download the file and unzip it:

3. Load the new certificate and private key in the atvise web server

3.1 Move these files to the corresponding atvise directories:

- Private key directory: C:\Program Files\atvise\PKI\CA\private

- Certificate directory: C:\Program Files\atvise\PKI\CA\certs

3.2 Open the atvise Builder and choose these files as the default certificate and key for the atvise HTTPs web server:

4. Trust the new certificate in the operating system

In our case, we are using Windows. Open the Microsoft Management Console, right click on Trusted Root Certification Authorities, All Tasks, Import... And follow the instructions to import our new certificate.crt: 

5. Well done! Now launch a secure HTTPs client to test it