Managing Web Client Certificates

<< Click to Display Table of Contents >>

Navigation:  Peer Global File Service Help > Advanced Topics > Managing TLS Certificates >

Managing Web Client Certificates

Overview

Web client certificates are used to establish trusted HTTPS communication between users’ web browsers and the PMC web client.  Managing these certificates allows you to secure browser-based connections, replace existing certificates, and maintain certificate trust relationships within your PMC environment.

You can manage web client certificates from the Topology perspective in the PMC.  Certificate management operations help organizations align PMC security with internal certificate management policies.

Web client certificate changes can temporarily interrupt browser-based access while services restart and reload updated certificate information.  Users might need to reconnect after the updated certificates are applied.

Before You Begin

Before managing web client certificates:

Verify that you have sufficient permissions to access the Topology perspective.

Ensure that users are aware of possible temporary reconnect prompts or browser trust warnings.

If using CA-signed certificates, verify that the certificate matches the PMC hostname used by clients.  OR   If using CA-signed certificates, verify that certificates contain the correct PMC hostnames and required trust chain information.

Back up existing certificate and keystore files before replacing or importing certificates.

For prerequisite information, see Preparing for Certificate Management.

Common Web Client Certificate Tasks

The following certificate management tasks are available from the Sites view in the Topology perspective.

Task

Description

Generate Web Client Certificates

Creates new self-signed web client certificates for secure HTTPS communications.

Import Web Client Certificates

Replaces existing web client certificates with user-provided certificates and private keys.

Restore Web Client Certificates

Restores the default PMC web client certificates

For more information on performing these tasks, see:

Generating Self-Signed Web Client Certificates

Importing Web Client Certificates

Restoring Default Web Client Certificates