How to Check Certificates in CenTran 4.1.5

How to Check Certificates in CenTran 4.1.5?

The following items can be checked for Centran Certificates:

Centran Configuration File

• The Centran configuration file section for behaviors >>serviceBehaviors >>serviceCertificate has the entries for what certificate is going to be used by Centran.

  Note: See serviceCertificate of serviceCredentials for a detailed description of these values. 

• The certificate can be identified by name or by thumbprint. The certificate is set up by the Centran Configuration Manager by thumbprint as default.

Centran Configuration Manager

1. Open the Centran Configuration Manager. 
2. Check the Self Signed Certificates tab. 

3. The Centran Web Service Server Certificate will show a certificate name. 

   Note: This name must exactly match how the web browser is being used to access Centran, or the certificate will not match.

Certificate Source

• The certificate can be self-signed, or from a certificate authority. If the certificate for the Centran web service is from a network certificate authority, any clients will automatically trust the Centran certificate. 
• If the certificate is self-signed, then to establish a chain of trust, that certificate or certificate authority must be installed manually with client systems. 

• If the certificate is self-signed and created on Windows Server 2003, the level and size of the encryption of the certificates do not match the requirement for SSL.

  Note: To do SSL off of Windows Server 2003, you will need to generate proper certificates from a system running Windows 7 or higher or get certificates from a network certificate authority.

Exporting Centran Certificate

1. From the start menu, select Accessories and right click on Command Prompt. 
2. Select Run as administrator. 
3. The command prompt should have the title Administrator: Command Prompt. 
4. Type mmc at the administrator command prompt. 
5. You should see a window that says Console1 - [Console Root]. 
6. Click File Add / Remove Snap In.... A dialog labeled Add or Remove Snap-ins should be displayed. 
7. Select Certificates and click Add. Select Computer account and then Local Computer from the dialogs that are displayed. Click Finished. 
8. Click OK in the Add or Remove Snap-ins dialog. 
9. Under Certificates (Local Computer), expand Trusted Root Certification Authorities, and expand Certificates. 
10. Select the cerficate matching the Certificate Authority used to generate the self-signed certificate used for Centran. Right click on the certificate and select All Tasks>> Export.... 
11. The Certificate Export Wizard is displayed. Export the certificate without the private key. Use the default settings to export the certificate to a .CER file.

Client System Self Signed Certificate Install

1. Open up a console with the Certificates snap in as administrator as described above, on the client computer system that is going to be accessing the Centran web service. 
2. Under Certificates (Local Computer), expand Trusted Root Certification Authorities, and expand Certificates. 
3. Right click on Certificates and select All Tasks >> Import.... 
4. Import the certificate .CER file you exported from the Centran server.

Applies To

CenTran 4.1.5