Updating public SSL certificate for CCX / CyTrack
Table of Contents
Updating of public SSL certificate is applicable in the following sections.
Updating/adding public SSL certificate for CCX Desk / CyDesk
Save your SSL certificate (Cert must include the private key) onto the required server, remember which directory you have saved it to.
Install your SSL certificate (Cert must include the private key) to the required server, see steps below
Double check on the new certificate you have imported and make sure it has a private key and a friendly name as screenshot below.
If your certificate doesn’t have a private key speak to the person who has provide you with the certificate and ask them to provide you a new one with private key included.If you don’t have a friendly name set for the imported cert do the following
Ensure you move the root and intermediate certificate into the corresponding Trust Root and Intermediate certificate store. If you are not sure which is which, please check with the contact that has provided you the certificate file.
Stop the “DeskWeb Gateway” which will automatically stop both “DeskWeb Hosting” & “DeskWeb Notification” service
Run the CyTrack/CCX installer for same version as currently installed components (DO NOT USE a different versions)
Select Advanced install
Only select to install the three DeskWeb components that we uninstalled
Follow the wizard
When prompted for certificate - select “Use https, with your own certificate”
In the drop down box ensure you select the new imported certificate and click the “Assign Certificate” button
You can now cancel the wizard
Test CCX Desk/CyDesk URL in a incongnito/in-private browser & make sure it is reflecting the new certificate
After changing URL - Be sure to check CyReport BI Configuration Url and CyRecord Profile - Report Server URL - ensure they are correct and updated.
Updating/adding public SSL certificate for Security Manager, Dashboard & Reporting URL
Once you have updated CCX Desk/CyDesk URL, open IIS Manager, right click on the web site and select “Edit Bindings…”
Ensure you have selected https then click on “Edit” . Select the new certificate you have imported and click “Ok”
Restart IIS
Test URL for security manager, dashboard & reporting
Add a Local DNS Lookup to Hosts File
When you type a website URL into the address bar of your browser, a request is sent to a type of internet server known as a domain name server. This server takes the URL you typed and then checks which specific IP addresses are listed for the actual servers that host the content you’re looking for.
The problem with this is that if something’s wrong with the name server, you’re not going to get access to the correct site. Even worse, if the name server has been hijacked, you might end up at a fake site! The good news is that you can manually specify the link between specific IP addresses and website addresses, simply by adding a local DNS lookup to your “hosts” file.
To modify your hosts file in windows, follow these steps:
Open the Start Menu and type “Notepad”.
Once Notepad appears, right-click on it and select “Run as administrator”.
In Notepad, click Open and head to c:\Windows\System32\Drivers\etc\hosts and open it the hosts file. Remember to change the file type to “All Files”
You should see this default hosts file from Microsoft.
Don’t worry about any of the text already in the document. You can just leave it as is and add your own entries at the bottom of the file. Any line that starts with a “#” symbol is treated as a comment and not used for name lookups.
[Source: https://helpdeskgeek.com/]
In some rare cases after updating to the new certificate the URL doesn’t load and has a 503 error when you try to view the page. See this article for reference on how to resolve.
https://cytrack.atlassian.net/wiki/spaces/CISA/pages/1771077633