Activate certificate

Whatever certificate is chosen for the VAKA system, certain parameters must be configured in the VAKA system before the certificate is activated.

1. Log in to the Java/PC client
2. Navigate to Domain Settings.
3. If this has not already been done, expand all individual domains.
4. For each domain controller (B60):
   1. Double-click the name of the device.
   2. Navigate to the General tab.
   3. Enter the host name, the IP address or URL used by the VAKA system to allow system components on the network to find each other.
   4. Navigate to the Network tab.
   5. Ensure that the relevant information has been provided.
   6. Click Save to close. If no information has been changed, click Close to finish.
5. For any domain controller (B60) exposed to the internet for reservation and/or remote administration:
   1. Enter the Public host name (the IP address or URL used on the internet to reach the VAKA system).
   2. Enter the DNS server.

VAKA-generated certificate

1. Navigate to Settings -> System ->VAKA Admin.
2. Under Certificate type, select Locally generated.
3. Click Save to close.

To install a VAKA-generated certificate in a web browser that interacts with VAKA, see the section Configure Tibbo.

Let's Encrypt

In order for verifications from the Let’s Encrypt service to work, port 80 must be accessible from the internet towards the domain controller to which the web browser is connected.

1. Navigate to Settings -> System ->VAKA Admin.
2. Under Certificate type, select Let’s Encrypt.
3. Click Save to close.

Customer-specific certificate

Certificates must only contain certificates of one type. VAKA cannot handle linked (chain) certificates.

1. Navigate to Settings -> System ->VAKA Admin.
2. Under Certificate type, select Customer-specific.
3. Click Import.
4. Select the appropriate webserver certificate (PEM format).
5. Click Next.
6. Select a file with a private key (PEM format).
7. If the private key is encrypted, enter the password of the private key file.
8. Click Save to close.