Changes

no edit summary
Line 14: Line 14:  
In this example, we will be able to access the device webpage using HTTPS, with a free certificate from a free CA.
 
In this example, we will be able to access the device webpage using HTTPS, with a free certificate from a free CA.
   −
== <sup><big>Certificate creation and trust</big></sup> ==
+
== <big>Certificate creation and trust</big> ==
 
1. You must have a DNS record linked to the IP of the router; in my case, I’m using a Windows server to act as a DNS server.
 
1. You must have a DNS record linked to the IP of the router; in my case, I’m using a Windows server to act as a DNS server.
     As shown, I choose a hostname '''rut955.teltonika.uae''' and it's linked with '''172.16.16.1''' the LAN IP of the router.
+
     As shown, I choose the hostname '''rut955.teltonika.uae''' and it's linked with '''172.16.16.1''' the LAN IP of the router.
 
     This hostname will be used for creating the certificate later.
 
     This hostname will be used for creating the certificate later.
   Line 32: Line 32:  
5. The final page:
 
5. The final page:
 
[[File:Getacert3.png|center|alt=|border|1102x1102px]]
 
[[File:Getacert3.png|center|alt=|border|1102x1102px]]
 
+
<br>
 
   
6. Click on (+) beside '''Open Private Key''':
 
6. Click on (+) beside '''Open Private Key''':
 
[[File:Getacert4.png|center|alt=|border|1102x1102px]]
 
[[File:Getacert4.png|center|alt=|border|1102x1102px]]
Line 39: Line 38:  
Copy the text to a new Notepad file, and rename it to '''name.crt''' in my case I used a simple name '''cer.crt'''
 
Copy the text to a new Notepad file, and rename it to '''name.crt''' in my case I used a simple name '''cer.crt'''
   −
 
+
<br>
 
7. Click on (+) beside Open Public Key:
 
7. Click on (+) beside Open Public Key:
 
[[File:Getacert5.png|center|alt=|border|1102x1102px]]
 
[[File:Getacert5.png|center|alt=|border|1102x1102px]]
Line 45: Line 44:  
Copy the text to a new Notepad file, and rename it to '''name.key''' in my case I used a simple name '''key.key'''
 
Copy the text to a new Notepad file, and rename it to '''name.key''' in my case I used a simple name '''key.key'''
    +
<br>
 
8. Click on the [.p12] file, and it will be downloaded:
 
8. Click on the [.p12] file, and it will be downloaded:
 
[[File:Getacert6.png|center|alt=|border|1102x1102px]]   
 
[[File:Getacert6.png|center|alt=|border|1102x1102px]]   
Line 56: Line 56:  
<br>
 
<br>
 
11. Right-click and highlight '''All Tasks''', click '''Import…'''[[File:Windows3.png|center|alt=|border|1102x1102px]]
 
11. Right-click and highlight '''All Tasks''', click '''Import…'''[[File:Windows3.png|center|alt=|border|1102x1102px]]
 
+
<br>
    
12. Choose the ".p12" file downloaded before:
 
12. Choose the ".p12" file downloaded before:
Line 62: Line 62:  
[[File:Windows4.png|center|alt=|border]]
 
[[File:Windows4.png|center|alt=|border]]
   −
Then '''Next''', then '''Next''', then '''Finish'''.
+
Then '''Next''', '''Next''', then '''Finish'''.
   −
== <sup><big><big>Device configuration</big></big></sup> ==
+
== <big>Device configuration</big> ==
 
     Go to '''System''' → '''Access Control''' → '''WEBUI'''
 
     Go to '''System''' → '''Access Control''' → '''WEBUI'''
    
1) Turn off '''Certificate files from device'''.
 
1) Turn off '''Certificate files from device'''.
 
[[File:RUT1.png|center|alt=|border|1102x1102px]]
 
[[File:RUT1.png|center|alt=|border|1102x1102px]]
  −
      
2) Click browse in '''Server certificate''' and choose the [.crt] file created.
 
2) Click browse in '''Server certificate''' and choose the [.crt] file created.
Line 83: Line 81:  
5) Open the WebUI again using the DNS record:</big></sup>
 
5) Open the WebUI again using the DNS record:</big></sup>
 
[[File:Windows done.png|center|alt=|border|1102x1102px]]
 
[[File:Windows done.png|center|alt=|border|1102x1102px]]
'''<big>Now we can access the WebUI securely, and we can turn of the HTTP access.</big>'''
+
Now we can access the WebUI securely, and we can turn off the HTTP access.
   −
=<small>See Also</small>=
+
== <big>See Also</big> ==
    
* [[Remote WebUI Access]]
 
* [[Remote WebUI Access]]
 
* [[Unblocking WebUI Access]]
 
* [[Unblocking WebUI Access]]
 +
[[Category:Router control and monitoring]]