Server Certificates

Server certificates are required to use SSL with Perceptive Enterprise Search. You can find out more information about SSL here.

To use SSL you will need to request a certificate from an authorized SSL Certificate Authority. However, for testing purposes or internal use, you can generate a self-signed SSL certificate.

SSL Certificate Generation

To generate SSL certificates you will need to obtain the tools for creating the certificate or certificate request. You can download the OpenSSL tools with samples from Perceptive Enterprise Search at /webshared/tools/OpenSSLTools.zip. Save this file and unzip its contents into an empty folder.

Verified SSL Certificates

To obtain a verified SSL certificate, you will first need to generate a certificate request. First open the "sample.cnf" file in a text editor.

Modify this file to reflect your organizations details. The important sections to change are as follows.

In the [ CA_default ] section:

• default_days - This is the number of days the certificate will be valid.

In the [ req_distinguished_name ] section:

• C - This is the Country Code of your organization (max 2 characters).
• ST - This is the State of your organization.
• L - This is the Location or city of your organization.
• O - This is your organization's Name.
• OU - This is the organizational unit or department of your organization.
• CN - This is the hostname of the server that will be using SSL.
• emailAddress - This is the email address of the contact for your organization.

NOTE: It is important that the hostname matches the hostname of the site that will be using SSL. For example, "secure.yourdomainname.com".

After you have modified the "sample.cnf" file, run the "create_cert_request_sample.bat" script to create the files required for the certificate request. Two files will be generated, "sample.crt" and "sample.key". The "sample.crt" file will need to be sent to the SSL certificate authority that you have chosen. "sample.key" is a private key file that needs to be kept secret and should not be shared.

Once you receive your SSL certificate files, you will need to copy them into the site directory for the site which will be using SSL. For example, "C:\Program Files\Perceptive Enterprise Search\WebSites\Default", is the site directory for the default website.

You will then need to specify the files appropriately in the site's Security / Server Certificates options. You will also need to specify an SSL port in the Bindings options for the site.

Self-signed SSL Certificates

To generate a self-signed SSL certificate, first open the "sample.cnf" file and edit it as described in the previous section. Then run the "create_self_signed_sample.bat" script. This script will create two files, "sample.key" and "sample.crt". Copy these files into the site directory for the site which will be using SSL.

You will then need to specify the files appropriately in the site's Security / Server Certificates options. You will also need to specify an SSL port in the Bindings options for the site.