Cordex®CXCHPControllerSoftwareManual|20-Maintainingthecontroller
Notice: A subject matter expert or IT personnel is required to support private key and certificate
management and installation to the controller and any other HTTPS configuration activities. The
use of a self-signed certificate is allowed within controller. With first access to the web server, the
browser will display a pop-up indicating a self-signed certificate and a “Trust” acknowledgment is
required. Self-signed certificates allow you to secure a large number of controllers using a self-
managed domain name address for each controller
Notice: Secure connection can only be achieved by the browser if a domain name is used
(example, https://www.alpha.com). Based on web browser standards, an IP address cannot
resolve to a secured connection to the controller.
TwofilesmustbeuploadedtoenableHTTPSonthecontroller.Thepublickey,oftenreferredtoasthe
certificate,andtheprivatekey,whichisacertificateverifiedbyanindependentCertificateAuthority(CA).
MostmodernbrowserswillautomaticallytrustandacceptacertificatefromaknownCA.Werecommend
thatsubjectmatterexpertorITpersonwithHTTPSexperiencecompletethisprocess.
20.9.2. Configure HTTPS
ThesettingsforHTTPSarelocatedunderController > Communication > Web Server.
Bydefault,HTTPSisdisabledontheControlleronfirststart-up.
20.9.2.1. Web server ports
Thecontrollerhasconfigurablewebserverportsonthewebinterface.ThestandardHTTPportdefaults
toport80andthestandardHTTPSportdefaultstoport443.Ifusingacustomportnumber,itis
recommendedtousecustomportnumbersaboveport1024.
Notice: A soft restart of the controller is required after all configurations are made when changing
HTTP server port values.
20.9.2.2. Upload a certificate and key
HTTPSrequiresavalidcertificateandaprivatekeyfiletobeuploadedtothecontroller.UsinganRSA
keyisrecommendedasitistheuniversallyacceptedkeytypebycommonwebbrowsers.Thecontroller
iscompatiblewithcertificatesfollowingtheX.509standard.
Notice: A subject matter expert or IT personnel are required to support private key and certificate
management as well as installation to the controller.
Thecontrollerrequiresasinglecertificatefile,whichcontainsthespecificcertificateissuedtothe
controller,alongwiththeintermediatecertificateimmediatelyfollowing.Acopy-and-pasteprocess
canconsolidatemultiplecertificatesforthispurpose.Anexamplecertificatefilewithtwoembedded
certificatesshownhere.
0350058-J0 Rev AL Page 219