System information

Crestron 3-Series Control Systems Reference Guide
Reference Guide – DOC. 7150A 3-Series Control Systems • 43
Upload the CA-Signed Certificate
Once the CA validates the .csr, the CA issues the certificate. The certificate is
usually sent to the requester via e-mail, in the following format:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
1. Copy and paste the text between the “Begin Certificate” and “End
Certificate” delimiters to a text file using a text editor such as Notepad.
2. Save the file to the hard drive and name the file srv_cert.cer.
3. In Toolbox, select Functions | SSL Management….
4. Select the Certificate Management arrow (
) to display the “Certificate
Management” drop-down menu.
5. Select Upload Signed Certificate… from the drop-down menu.
6. Locate the directory where srv_cert.cer was saved and click Open. This
uploads the signed certificate to the \SYS directory of the 3-Series processor
in DER format (i.e., \\sys\srv_cert.der).
Upload Root Certificate
Along with the signed certificate, all CAs electronically give access to what is called
a root certificate. A root certificate is a document that validates the CA itself. At the
time of sending the signed certificate, most CAs provide a URL to where their root
certificate is stored. The buyer of the signed certificate may then download the root
certificate onto the server. Follow steps 1 to 4 from the “Upload the CA Signed
Certificate” procedure above.
1. Select Upload Signed Certificate… from the drop-down menu.
2. Locate the directory where rootCA_cert.cer was saved and click Open. This
uploads the signed certificate to the \SYS directory of the 3-Series processor
in DER format, i.e., \\sys\rootCA_cert.der.
Enable SSL with CA-Signed Certificate
1. Open Crestron Toolbox and establish a serial connection to the 3-Series
Control System as described in “Establishing Communications with the
Control System” on page 6.
2. Select Functions | SSL Management… to open the “SSL Management”
window. Refer to the following illustration for visual guidance.