Chat now with support
Chat with Support

KACE Systems Deployment Appliance 9.1 Common Documents - Administrator Guide

About the KACE Systems Deployment Appliance Getting started Using the Dashboard Configuring the appliance Setting up user accounts and user authentication Configuring security settings Preparing for deployment Managing device inventory Using labels Creating a Windows or Linux Boot Environment Managing drivers Capturing images Capturing user states Creating scripted installations Creating a task sequence Automating deployments Performing manual deployments Managing custom deployments Managing offline deployments About the Remote Site Appliance Importing and exporting appliance components Managing disk space Troubleshooting appliance issues Updating appliance software Glossary About us Legal notices

Enable SSL using an existing certificate

Enable SSL using an existing certificate

By default, SSL is disabled. You can use an existing SSL certificate, an intermediate certificate, or a self-signed certificate to run your appliance on a secure web browser. Using an existing certificate requires having an SSL private key and ensuring that port 80 is open.

* 
NOTE: If you do not have a valid certificate, the appliance can generate a Certificate Signing Request (CSR) that you can send to your Certificate Signing Authority. You can download the private key and save it in a safe place. See Generate private key for new SSL certificate.
1.
On the left navigation pane, click Settings > Control Panel to display the Control Panel, then click Security to display the Security Settings page.
2.
Click Enable SSL and click I already have an SSL certificate, Can I use it?
3.
Click Use My Certificate.
4.
Under Optional SSL Settings, select one of the following certificate types:
◦
Private Key & Certificate (most common).
◦
What if I also have an intermediate certificate?
◦
PKCS-12 (.pkcs12, .pfx, .p12)
Enter the password for the PKCS-12 SSL formatted certificate.
5.
Browse to the key or certificate and click Apply Certificate.

The secure web browser using https is available.

Generate private key for new SSL certificate

Generate private key for new SSL certificate

By default, SSL is disabled. You can generate a private key to enable SSL after you generate a new certificate. You can use a valid self-signed certificate if you have a private key or a PKCS-12 file, and the private key and certificate were generated from the same Certificate Signing Request (CSR).

Export your appliance components to a different location and enable SSH in case there is an error that might require the appliance to stop the key generation.
1.
On the left navigation pane, click Settings > Control Panel to display the Control Panel, then click Security to display the Security Settings page.
2.
Click Enable SSL to use a new certificate or a valid self-signed SSL certificate. Note that Quest KACE does not recommend using a self-signed certificate.
◦
Generate a new SSL certificate:
1.
Click Get New SSL Certificate to display the SDA Advanced SSL Settings wizard.
2.
Fill in the fields to generate a CSR.
3.
Download the private key and save the key in a safe place to use to enable SSL when you get a valid certificate from your Certificate Signing Authority.
4.
Copy or download the generated CSR and send it to your Certificate Signing Authority.
◦
Use a self-signed certificate:
▪
Click Can I use a self-signed certificate instead?, then click Save and Restart Apache.

Disable SSL

Disable SSL

You can disable the secure web browser that the appliance is running on by disabling SSL (Secure Sockets Layer).

1.
On the left navigation pane, click Settings > Control Panel to display the Control Panel, then click Security to display the Security Settings page.
2.
Click Enabled ports: 80, 443 (change).
3.
Clear the following check boxes:
◦
Enable port 443 (HTTPS)
◦
Forward port 80 to port 443
4.
Click Apply Changes.

The HTTPS browser is now unavailable.

Enable database access

Enable database access

You can enable database access to allow external programs, such as Crystal Reports or Excel® to query the appliance database so that you can create your own reports. By default, the appliance does not allow external connections to the database.

The account for external access to the database is username: report and password: box747.

1.
On the left navigation pane, click Settings > Control Panel to display the Control Panel, then click Security to display the Security Settings page.
2.
Select the Enable Database Access check box.
3.
In Report User Database Password and Verify Password, specify the database password that you want the external resources to use when accessing the appliance database.
The indicator underneath the Report User Database Password field changes color as you type the password string, to indicate the password strength. Red indicates the lowest, and green the highest complexity level. Choose a strong password to prevent unauthorized users from accessing your database records.
If you do not specify a password for the Report User, the programs querying the appliance use the default password, which can allow attackers to expose sensitive data. A warning alert on the Home Dashboard appears, prompting you to change the database password. For more information about the Dashboard, see Using the Dashboard.
4.
Click Save.

You might have to reboot the appliance before external programs can query the appliance database.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating