Reference Guide – DOC. 7150B 3-Series Control Systems • 25
Load the Certificate Files
To upload the externally-signed certificate to the control system:
1. Rename the three certificate files as follows:
• Rename the private key file to “srv_key.pem”.
• Rename the signed certificate file to “srv_cert.cer”.
• Rename the certification chain file to “rootCA_cert.cer”.
2. Use an SCP or SFTP client to copy the three certificate files to the \User
directory on the control system.
3. Connect to the control system via SSH or Crestron Toolbox.
4. Issue the delete \Sys\rootCA_cert.cer, delete \Sys\srv_cert.cer,
and delete \Sys\srv_key.pem commands to delete any existing
certificate files.
5. Issue the move \User\rootCA_cert.cer \Sys, move
\User\srv_cert.cer \Sys, and move \User\srv_key.pem \Sys
commands to move the new certificate files to the \Sys directory.
Enable TLS/SSL with the Externally-Signed Certificate
To enable TLS/SSL with the externally-signed certificate:
1. Issue the SSL CA command in the control system console.
2. Issue the reboot command to reboot the control system.
3. Issue the del \Sys\*.cer and del \Sys\*.pem commands.