Bogen_Certificate_Installation-9
Author: Bogen

Installing Certification Authority on Windows System

To download and install the Certification Authority on a Windows device:

1​From your Chrome or Edge browser, type http://<device>/ssl/bogenCA.crt in the address bar, where <device> is the Nyquist device’s IP address or DNS name (for example, http://192.168.1.0/ssl/bogenCA.crt).

2​Select the downloaded file and select Open.

3​Select Open when prompted with “Do you want to open this file?”

4​Select the Install Certificate... button. The Certificate Import Wizard starts.

5​Select Current User, and then select Next.

Note: To allow all users on this Windows client to access the Nyquist device, select Local Machine instead of Current User. You may be prompted for administrator credentials.

6​Select “Place all certificates in the following store”, then select Browse.

7​Select Trusted Root Certification Authorities, and then select OK.

8​Select Next.

9​Select Finish.

10​Restart the browser and log in to the device’s web application.

Install Certificate Authority using PowerShell (optional) You can optionally download and install the Certification Authority using a PowerShell command prompt or script, which involves fewer steps. To download the certificate to a CRT file, execute the following PowerShell command, replacing <device> with the IP address or DNS name of the Nyquist device: Invoke-WebRequest -Uri http://<device>/ssl/bogenCA.crt -OutFile $env: TEMP\bogenCA.crt To optionally validate the certificate before importing it, execute the following command: [Security.Cryptography.X509Certificates.X509Certificate2]::new( "$env:TEMP\bogenCA.crt").GetCertHashString() -eq '0A8248F69D970F8DD855D0E0592972DA64B1A845' If the command returns True, the certificate is valid. To install the CA certificate into the CurrentUser certificate store, which only applies to the current user, execute the following command: Import-Certificate -CertStoreLocation cert:\CurrentUser\Root -FilePath $env:TEMP\bogenCA.crt To install the certificate for all users on this machine, which requires administrator privileges to execute, execute the following command: Import-Certificate -CertStoreLocation cert:\LocalMachine\Root -FilePath $env:TEMP\bogenCA.crt Note: These commands can be executed remotely using PowerShell Remoting, which may be helpful if the certificate needs to be installed on multiple client machines.