Add a Custom SSL Certificate to Wisenet Wave Server

SSL Certificates are small data files that digitally bind a cryptographic key to an organization’s details. When installed on a server, it activates the padlock and the HTTPS protocol and allows secure connections from a server to a browser.

Typically, SSL is used to secure credit card transactions, data transfer, and logins, and more recently is becoming the norm when securing browsing of social media sites.

Wisenet Wave Server utilizes a self-signed SSL certificate located in the certificate directory as a file called default.pem. It will be generated and renewed automatically when the Server restarts.

To improve Wave Server security, you can obtain a public/signed certificate from your preferred certificate provider and install it in the certificate directory as a file called cert.pem. A valid certificate should be issued by the Certificate Authority (CA) and contain the full certificate chain info, otherwise you will have to generate the Intermediate CA chain info yourself.

Obtaining a Custom Certificate

1. Create a new file via a text editor and save it as cert.pem
2. Open each certificate file you received from the CA in a text editor and extract the content:
   a. Root CA (for example: ca_bundle.crt)
   b. Server Certificate (for example: certificate.crt)
   c. Intermediate CA (if not provided by your certificate provider, visit https://whatsmychaincert.com/ and enter the content from Server Certificate file to generate the content for the Intermediate CA)
   d. Private Key (for example: private.key)
3. Add the content to cert.pem in the following format:

   -----BEGIN PRIVATE KEY----- 
   ... Private key content ... 
   -----END PRIVATE KEY----- 
   
   -----BEGIN CERTIFICATE----- 
   ... Server certificate content ...
    -----END CERTIFICATE----- 
   
   -----BEGIN CERTIFICATE----- 
   ... Intermediate CA content ... 
   -----END CERTIFICATE----- 
   
   -----BEGIN CERTIFICATE----- 
   ... Root CA content ... 
   -----END CERTIFICATE-----

4. Save changes to cert.pem

Installing a Custom Certificate

Once you created the cert.pem file from the certificate files provided to you by your CA, take the following steps:

1. Stop the Wave Server service.
2. Navigate to the directory for the Wave Server SSL certificate.

   Windows 

   C:\Windows\System32\config\systemprofile\AppData\Local<%COMPANY.NAME%><%COMPANY.NAME%> Media Server\ssl

   Ubuntu

   /opt/<%INSTALLER.NAME%>/mediaserver/var/ssl

3. Move the cert.pem that you created to this location.
4. Start Wave Server.