# Insights SSL Certificate Configuration

*Applies to: Patch My PC Advanced and Patch Insights*

Advanced Insights requires a valid SSL certificate to bind to the application websites and supports the following types:

* Server host (FQDN) standard certificate.
* Wildcard certificate.
* Custom CNAME / Alias certificate.
* Self-signed certificate.

{% hint style="warning" %}
Ensure the SSL certificate requirements are reviewed here: [Insights Certificate Requirements](/patch-my-pc-insights/advanced-and-patch-insights-requirements-and-prerequisites/insights-certificate-requirements.md)
{% endhint %}

### Certificate configuration scenarios

* **Scenario 1 - Server Host name certificate.**
  * For Advanced Insights URL deployment using **server host name** (e.g. *<https://server01.contoso.local>*) follow steps described in section:[#standard-server-host-name-certificate](#standard-server-host-name-certificate "mention")
* **Scenario 2 - Wildcard certificate.**
  * For custom Advanced Insights URL deployment using a **wildcard certificate** (e.g. \*.contoso.local) follow steps described in section: [#wildcard-certificate](#wildcard-certificate "mention")
* **Scenario 3 - CNAME / Alias certificate.**
  * For custom Advanced Insights URL deployment using a **CNAME / Alias,** (e.g. *<https://AdvancedInsights.contoso.local>*) follow steps described in section: [#cname-alias-certificate](#cname-alias-certificate "mention")
* **Scenario 4 - Self-signed certificate.**
  * For Advanced Insights URL deployment using a **Self-signed** certificate follow steps described in section: [#self-signed-certificate](#self-signed-certificate "mention")

## Standard Server host name certificate

Select the certificate which represents the server host name (FQDN).

<figure><img src="/files/a9jyhvQ9fmV1ofkrXTzR" alt="Select a certificate" width="563"><figcaption></figcaption></figure>

Once selected, no further certificate configuration is required.

Click Next to proceed to the [Insights SQLite Database](/patch-my-pc-insights/download-and-install-insights/insights-sqlite-database.md) page.

## Wildcard certificate

Select the certificate which represents the wildcard certificate.

<figure><img src="/files/OpCk8nrYCyBzzRezTEQH" alt="Wildcard certificate" width="563"><figcaption></figcaption></figure>

Click the **'Set CNAME / Alias'** button.

In the CNAME / Alias configuration page, the installer will automatically pre-populate the domain wildcard property from the selected certificate.

<figure><img src="/files/DjFUVxYx2cmVqv3XKafx" alt="Clicking the &#x27;Set CNAME / Alias&#x27; button." width="563"><figcaption></figcaption></figure>

The CNAME / Alias property value box will need to be updated with a chosen CNAME / Alias prefix. For example:

***'AdvancedInsights.corp.contoso.local'***

Then click **'Set CNAME - Alias'**.

<figure><img src="/files/70d3RBCcVhiWKol4W7QL" alt="Clicking &#x27;Set CNAME - Alias&#x27;." width="563"><figcaption></figcaption></figure>

Click Next to proceed to the [Insights SQLite Database](/patch-my-pc-insights/download-and-install-insights/insights-sqlite-database.md) page.

<figure><img src="/files/UFajUaMqLKRJKXnNsEL8" alt="Click Next" width="563"><figcaption></figcaption></figure>

{% hint style="warning" %}
When using a wildcard certificate, if no CNAME / Alias is set using the CNAME / Alias configuration page, the installer will automatically default to setting the Advanced Insights URL to the server host name FQDN.\
\
Example:&#x20;

*<https://server01.corp.contoso.local>*
{% endhint %}

## CNAME / Alias certificate

Select the certificate that represents the CNAME / Alias certificate.

<figure><img src="/files/GBd28UaGWLVSLlY79MI8" alt="Selecting the certificate that represents the CNAME / Alias certificate" width="563"><figcaption></figcaption></figure>

Click the **'Set CNAME / Alias'** button.

In the CNAME / Alias configuration page, the installer will automatically pre-populate the CNAME / Alias property based on the available SAN entries from the selected certificate.

In this example, the selected certificate has one SAN entry which has been automatically pre-populated:

<figure><img src="/files/IsbsMKB5MHFeUR5uGhNf" alt="Clicking the &#x27;Set CNAME / Alias&#x27; button." width="563"><figcaption></figcaption></figure>

Confirm the CNAME / Alias configuration by clicking the **'Set CNAME / Alias'** button.

<figure><img src="/files/pyo8kcLiEw10zyZy7Pls" alt="Confirming the CNAME / Alias configuration" width="563"><figcaption></figcaption></figure>

Click Next to proceed to the [Insights SQLite Database](/patch-my-pc-insights/download-and-install-insights/insights-sqlite-database.md) page.

## Self-signed certificate

To deploy Advanced Insights using a self-signed certificate, on the certificate selection page, click the **'Create Self -Signed Cert'** button:

<figure><img src="/files/KfCdwhTtPW714KUsuHUz" alt="Clicking the &#x27;Create Self -Signed Cert&#x27; button" width="563"><figcaption></figcaption></figure>

The installer will then automatically proceed to the [Insights SQLite Database](/patch-my-pc-insights/download-and-install-insights/insights-sqlite-database.md) dialog page.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.patchmypc.com/patch-my-pc-insights/download-and-install-insights/insights-ssl-certificate-configuration.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.