14.0

Chapter 7: Installing the Local Authenticator
Installing and binding the SSL certificate
About certificates
Using SSL requires that you obtain an SSL certificate. Nuance Management Center supports both signed
certificates from a certificate authority, and self-signed (or internally generated) certificates. However,
Nuance strongly recommends that you use a signed certificate, as self-signed certificates are not always
easily recognized by the client the same way signed certificates are.
You can obtain signed certificates from certificate authorities, such as GoDaddy or Verisign. The certificate
authority must be a trusted authority known to both the client computer and the server.
To obtain a signed certificate, you'll need to provide information to the certificate authority about your
organization and the server on which you are installing the certificate in the Certificate Signing Request
(CSR). Each certificate authority may require different information. Typically, the information can include the
following:
l Organization name
l Organization location information, such as town and state
l Computer name for the server on which you are installing the certificate
l Extended Key Usage value, such as 2.5.29.37. Extended key usage further refines key usage
extensions, which define the purpose of the public key contained in the certificate.
l Key Size, such as 2048 bits or 4096 bits. Determines the length of the public key in the certificate. A
longer key provides stronger security. You determine the level of security that is appropriate for your
environment.
You obtain this information from your IT department, or from the person who installed and configured your
server.
For more detailed information on installing SSL certificates, see:
http://msdn.microsoft.com/en-us/library/ms733791.aspx
Install the SSL certificate
Clients contact the Local Authenticator on the standard HTTP ports 80 and 443.
1.
Install an SSL certificate in the Personal Store under the Local Computer section for the "logon as"
user account under which the NMS service is running..
To add the Certificates Snap-in and view the certificates installed on the local computer, see https://-
technet.microsoft.com/en-us/library/cc754431(v=ws.11).aspx.
45