DLS FAQ - Revision history

Christian.kaehler: /* format update */

2014-01-16T08:25:18Z

‎format update

Christian.kaehler: /* Reference to the WPI - still need to add to Glossary */

2014-01-16T08:20:40Z

‎Reference to the WPI - still need to add to Glossary

Alexandra.allgaier: /* How can I configure a customized certificate for the https access to DLS-GUI? */

2012-08-08T10:49:08Z

‎How can I configure a customized certificate for the https access to DLS-GUI?

Horemu at 21:00, 21 April 2011

2011-04-21T21:00:59Z

Horemu at 21:00, 21 April 2011

2011-04-21T21:00:36Z

Stefan.Beck: /* Certificate Requirements */ Added Extended Key Usage

2009-08-27T14:43:00Z

‎Certificate Requirements: Added Extended Key Usage

Stefan.Beck: Feedback from Kai included

2009-08-27T13:28:48Z

Feedback from Kai included

Stefan.Beck: Added hints to DLS multinode installations

2009-08-27T11:38:04Z

Added hints to DLS multinode installations

Stefan.Beck: Description added: How can I configure a customized certificate for the https access to DLS-GUI

2009-08-26T14:05:37Z

Description added: How can I configure a customized certificate for the https access to DLS-GUI

Stefan.Beck: Added stub for DLS Server Administration

2009-08-11T08:54:12Z

Added stub for DLS Server Administration

@@ Line 10: / Line 10: @@
 === What is WPI ? ===
-: See [[http://wiki.unify.com/wiki/OpenStage_WPI]].
+: See [[OpenStage_WPI|WPI]].
 == DLS Server Administration ==

← Older revision		Revision as of 08:20, 16 January 2014
Line 9:		Line 9:
	: See [[DlsAPI]].		: See [[DlsAPI]].

		+	=== What is WPI ? ===
		+	: See [[http://wiki.unify.com/wiki/OpenStage_WPI]].

	== DLS Server Administration ==		== DLS Server Administration ==

← Older revision		Revision as of 10:49, 8 August 2012
Line 16:		Line 16:

	=== How can I configure a customized certificate for the https access to DLS-GUI? ===		=== How can I configure a customized certificate for the https access to DLS-GUI? ===
		+
		+	==== For DLS Version V6 and onwards ====
		+
		+	The DLS server certificates used for Server authentication during HTTPS access to the DLS-GUI can be customized via the DLS-GUI (Administration -> Server Configuration -> TLS Connector Configuration).<br>
		+
		+	Change the certificates used for server authentication on the HTTPS interface to the DLS GUI. Use customer’s CA, or configure internal DLS CA to generate DLS certificates or import customer certificates as files.
		+
		+	----
		+	==== For DLS Version V3 ====

	====Introduction====		====Introduction====

← Older revision		Revision as of 21:00, 21 April 2011
Line 1:		Line 1:
−	{{Breadcrumb\|0\|Deployment Service}}	+	{{Breadcrumb\|0\|0\|Deployment Service}}

	== General ==		== General ==

← Older revision		Revision as of 21:00, 21 April 2011
Line 1:		Line 1:
−	~~<div class="breadcrumb">~~	+	{{Breadcrumb\|0\|Deployment Service}}
−	{{up}} ~~[[FAQ]]~~
−	~~</div>~~

	== General ==		== General ==

@@ Line 91: / Line 91: @@
 | Intended purpose of the key contained in the certificate
 | digitalSignature, keyEncipherment
 |-
 |}

@@ Line 46: / Line 46: @@
 ====Certificate Requirements====
-The certificate must be a X.509 v3 certificate according to the [http://en.wikipedia.org/wiki/X.509 X.509 standard], as defined in [http://tools.ietf.org/html/rfc2459 RFC 2459].<br/>
+The certificate must be a X.509 v3 certificate according to the [http://en.wikipedia.org/wiki/X.509 X.509 standard], as defined in [http://tools.ietf.org/html/rfc5280 RFC 5280].<br/>
 The following table provides a summary of recommended settings in certificate fields and extensions.
@@ Line 95: / Line 95: @@
 ====Preconditions - What you need====
-* A PKCS#12 file that contains the private key and certificate you want to enable for DLS server (usually used extension for this file type on Windows OS is: ".p12").<br/>''The sample filename used in this instruction is: <code>My-Cert.p12</code>''
+* A PKCS#12 file that contains the private key and certificate you want to enable for DLS server (usually used extension for this file type on Windows OS is: ".p12").<br/>''The sample filename used in this instruction is: <code>My-DLS-Server-Credentials.p12</code>''
 * The passphrase this PKCS#12 file is encrypted with.<br/>''The sample passphrase is: <code>My-Passphrase</code>''
@@ Line 110: / Line 110: @@
 ====Step-by-Step Instruction====
-* On DLS Server, copy <code>My-Cert.p12</code> into the directory: <DLS-Installdirectory>\Tomcat5\conf
+* On DLS Server, copy <code>My-DLS-Server-Credentials.p12</code> into the directory: <DLS-Installdirectory>\Tomcat5\conf
 * Stop DLS Service
 * Edit the Tomcat configuration file: <DLS-Installdirectory>\Tomcat5\conf\server.xml:
@@ Line 121: / Line 121: @@
 ** Delete the connector for http completely
 ** Within the https connectors, replace the following XML attributes:
-*** Change <code>keystoreFile="conf/DeploymentServiceV2.p12"</code> to <code>KeystoreFile="conf/My-Cert.p12"</code>
+*** Change <code>keystoreFile="conf/DeploymentServiceV2.p12"</code> to <code>KeystoreFile="conf/My-DLS-Server-Credentials.p12"</code>
 *** Change <code>keystorePass="qe13.eq31"</code> to <code>KeystorePass="My-Passphrase"
 ** Save the changes of the file server.xml and quit the editor
 * Start DLS Service - the DLS web service now starts using the freshly installed customized SSL certificate.

@@ Line 78: / Line 78: @@
 | Subject
 | Distinguished name (DN) of the DLS web server
-| The Common Name (CN) as part of the DN is not a person's name, but must be the domain name (FQDN) of the DLS web server
+| The Common Name (CN) as part of the DN is not a person's name, but must be the domain name (FQDN) of the DLS web server<br/>(in multinode server installations, this must be the FQDN of the '''virtual''' DLS server address)
 |-
 | Subject Public Key Info
@@ Line 101: / Line 101: @@
 * '''The private key contained in the PKCS#12 file needs to be protected to prevent the server certificate from misuse by unauthorized persons!'''<br/>Therefore, ensure that only authorized DLS server administrators and customer IT/PKI administrators have access to this file.
 This particularly also applies to the location where the file is stored on the DLS server (see step-by-step instructions below.)
-* You can configure an individual certificate per port; for example: keep DlsAPI port 10444 running with the default certificate, and apply the configuration change to DLS-GUI port 10443 only. The description below changes both to the same new individual certificate.
+* You can configure an '''individual certificate per port'''; for example: keep DlsAPI port 10444 running with the default certificate, and apply the configuration change to DLS-GUI port 10443 only. The description below changes both to the same new individual certificate.
-* Do '''not''' change the configuration for the Workpoint Interface (https ports 18443 / 18444).
+* Do '''not''' change the configuration for the '''Workpoint Interface''' (https ports 18443 / 18444).
-* The changes may be lost, when the DLS server SW is updated -> you need to repeat the steps after DLS software update is done.<br/>(The default contents of server.xml may change with any new DLS version. After update do not just copy a saved version of your server.xml, but repeat the edit steps again, based on the new default server.xml file)
+* The changes may be lost, when the '''DLS server SW is updated''' -> you need to repeat the steps after DLS software update is done.<br/>(The default contents of server.xml may change with any new DLS version. After update do not just copy a saved version of your server.xml, but repeat the edit steps again, based on the new default server.xml file)
 ====Step-by-Step Instruction====

@@ Line 5: / Line 5: @@
 == General ==
-==== What is DLS ? ====
+=== What is DLS ? ===
 : See [[Deployment Service]].
-==== What is DlsAPI ? ====
+=== What is DlsAPI ? ===
 : See [[DlsAPI]].
@@ Line 14: / Line 14: @@
 == DLS Server Administration ==
-==== How can I access the web-based management of DLS (DLS-GUI)? ====
+=== How can I access the web-based management of DLS (DLS-GUI)? ===
 : See the current DLS release notes, chapter 4.5.5.
-==== How can I configure a customized certificate for the https access to DLS-GUI ====
+=== How can I configure a customized certificate for the https access to DLS-GUI? ===
-: description coming soon...