Insights SSL Certificate Configuration

Applies to: Patch My PC Advanced and Patch Insights

Advanced Insights requires a valid SSL certificate to bind to the application websites and supports the following types:

• Server host (FQDN) standard certificate.

• Wildcard certificate.

• Custom CNAME / Alias certificate.

• Self-signed certificate.

Certificate configuration scenarios

• Scenario 1 - Server Host name certificate.

  • For Advanced Insights URL deployment using server host name (e.g. https://server01.contoso.local) follow steps described in section:Standard Server host name certificate

• Scenario 2 - Wildcard certificate.

  • For custom Advanced Insights URL deployment using a wildcard certificate (e.g. *.contoso.local) follow steps described in section: Wildcard certificate

• Scenario 3 - CNAME / Alias certificate.

  • For custom Advanced Insights URL deployment using a CNAME / Alias, (e.g. https://AdvancedInsights.contoso.local) follow steps described in section: CNAME / Alias certificate

• Scenario 4 - Self-signed certificate.

  • For Advanced Insights URL deployment using a Self-signed certificate follow steps described in section: Self-signed certificate

Standard Server host name certificate

Select the certificate which represents the server host name (FQDN).

Once selected, no further certificate configuration is required.

Click Next to proceed to the Insights SQLite Database page.

Wildcard certificate

Select the certificate which represents the wildcard certificate.

Click the 'Set CNAME / Alias' button.

In the CNAME / Alias configuration page, the installer will automatically pre-populate the domain wildcard property from the selected certificate.

The CNAME / Alias property value box will need to be updated with a chosen CNAME / Alias prefix. For example:

'AdvancedInsights.corp.contoso.local'

Then click 'Set CNAME - Alias'.

Click Next to proceed to the Insights SQLite Database page.

CNAME / Alias certificate

Select the certificate which represents the CNAME / Alias certificate.

Click the 'Set CNAME / Alias' button.

In the CNAME / Alias configuration page, the installer will automatically pre-populate the CNAME / Alias property based on the available SAN entries from the selected certificate.

In this example, the selected certificate has one SAN entry which has been automatically pre-populated:

Confirm the CNAME / Alias configuration by clicking the 'Set CNAME / Alias' button.

Click Next to proceed to the Insights SQLite Database page.

Self-signed certificate

To deploy Advanced Insights using a self-signed certificate, on the certificate selection page, click the 'Create Self -Signed Cert' button:

The installer will then automatically proceed to the Insights SQLite Database dialog page.