Adding SSL (HTTPs) to deviceWISE

This section explains installing SSL certificates on deviceWISE.

  1. Create the certificate. Obtain a trusted and signed certificate or generate self signed certificates using something like mkcert.
  2. Add the certificate to deviceWISE HTTP server. Edit the default $deviceWISEInstall$/dwcore/dwcore.properties file in the deviceWISE install directory to add the path to the certificate and key.
    .....
      http.ssl.cert_file=certs/server.pem
     
  3. Get the self-signed certificate to be trusted (valid) on external instances. You can trust a self signed certificate by installing the root certificate in your Trusted Root Certification Authorities.
    1. Windows: Open Manage Computer Certificates and import the certificate.

      Follow the prompts to complete the import.
    2. Linux: Add the certificate /usr/local/share/ca-certificates/. For more information on adding/updating a certificate in Linux, see updating a certificate.

User can specify the following properties to change the certificate used by the http server.
http.ssl.cert_file=certs/server.pem
The cert chain file should be in PEM format and the directory is relative to dw/dwcore installation directory. Browser will have to install the corresponding CA to validate the server.