Insights SSL Certificate Configuration

Advanced Insights SSL Certificate configuration.

Applies to: Patch My PC Advanced and Patch Insights

Advanced Insights requires a valid SSL certificate to bind to the application websites and supports the following types:

• Server host (FQDN) standard certificate.

• Wildcard certificate.

• Custom CNAME / Alias certificate.

• Self-signed certificate.

Ensure the SSL certificate requirements are reviewed here: Insights Certificate Requirements

Certificate configuration scenarios

• Scenario 1 - Server Host name certificate.

  • For Advanced Insights URL deployment using server host name (e.g. https://server01.contoso.local) follow steps described in section:Standard Server host name certificate

• Scenario 2 - Wildcard certificate.

  • For custom Advanced Insights URL deployment using a wildcard certificate (e.g. *.contoso.local) follow steps described in section: Wildcard certificate

• Scenario 3 - CNAME / Alias certificate.

  • For custom Advanced Insights URL deployment using a CNAME / Alias, (e.g. https://AdvancedInsights.contoso.local) follow steps described in section: CNAME / Alias certificate

• Scenario 4 - Self-signed certificate.

  • For Advanced Insights URL deployment using a Self-signed certificate follow steps described in section: Self-signed certificate

Standard Server host name certificate

Select the certificate which represents the server host name (FQDN).

Certificate selection

Once selected, no further certificate configuration is required.

Click Next to proceed to the Insights SQLite Database page.

Wildcard certificate

Select the certificate which represents the wildcard certificate.

Wildcard certificate selection

Click the 'Set CNAME / Alias' button.

In the CNAME / Alias configuration page, the installer will automatically pre-populate the domain wildcard property from the selected certificate.

Wildcard CNAME / Alias URL configuration

The CNAME / Alias property value box will need to be updated with a chosen CNAME / Alias prefix. For example:

'AdvancedInsights.corp.contoso.local'

Then click 'Set CNAME - Alias'.

Setting CNAME / Alias property value

Click Next to proceed to the Insights SQLite Database page.

Set CNAME / Alias confirmation

When using a wildcard certificate, if no CNAME / Alias is set using the CNAME / Alias configuration page, the installer will automatically default to setting the Advanced Insights URL to the server host name FQDN. Example:

https://server01.corp.contoso.local

CNAME / Alias certificate

Select the certificate which represents the CNAME / Alias certificate.

CNAME / Alias certificate selection

Click the 'Set CNAME / Alias' button.

In the CNAME / Alias configuration page, the installer will automatically pre-populate the CNAME / Alias property based on the available SAN entries from the selected certificate.

In this example, the selected certificate has one SAN entry which has been automatically pre-populated:

CNAME / Alias URL configuration

Confirm the CNAME / Alias configuration by clicking the 'Set CNAME / Alias' button.

Setting CNAME / Alias property value

Click Next to proceed to the Insights SQLite Database page.

Self-signed certificate

To deploy Advanced Insights using a self-signed certificate, on the certificate selection page, click the 'Create Self -Signed Cert' button:

Create self-signed certificate

The installer will then automatically proceed to the Insights SQLite Database dialog page.