Skip to content

Client Access

The Administration > Client Access page can be used to secure client connections to the system using HTTPS and/or modify the system name which clients will use to access the system.

Warning

If you are configuring HTTPS access for the first time or you are changing the system name, access to the system will be interrupted for several minutes while all of its services are reconfigured and restarted. During this time you will be redirected to a maintenance page. From there, users will be able to access the system using its new URL after all of the services have finished restarting.

HTTPS Certificate

If a certificate file is uploaded using the Client Access page the system will be reconfigured to use that certificate for HTTPS client connections. If HTTPS is configured the system will only accept connections that are secured using TLS 1.2.

Your certificate file must meet the following requirements:

  • Must use Base64 PEM file format
  • Subject alternative name (SAN) section must contain the DNS name that will be used by clients to access the system
  • Certificate must not be expired
  • Certificate must not be self-signed
  • Host's public key and a matching private key must be provided
  • Public key of the certificate authority (CA) which issued the host's public key must be provided
  • All public keys within the file must be listed in hierarchical order, starting with the host and ending with the last CA of the trust chain

It is recommended, but not required, to include the full chain of trust within your certificate including the public keys of all intermediate CA.

Users will need to reload the website in order for their web browser to start using the new certificate. HTTP connection attempts will be redirected to HTTPS after a certificate has been configured.

System Name

The system name is what users will type into their web browser to access the system. The chosen name must resolve back to the IP address of the host machine. If the application indicates that it cannot verify your chosen name, you may need to follow the System Requirements > Configure DNS Servers instructions.

If the system is currently configured for HTTP access a text input field is displayed where you can specify a new system name.

If the system is configured for HTTPS access a list of choices will be displayed which are compatible with the most recent valid certificate that has been uploaded. If the certificate contains a wildcard a text input field will be displayed for specifying the wildcard portion of the name.