UniconOS Management (Scout Board) Certificate 2603 and later

Overview

This guide assists with the configuration and updating of the Scout Board Certificate.

Certificate Prerequisites

• Obtain a certificate with an exportable private key.
• If using a Microsoft Certification Authority, create a web certificate and make sure the private key is exportable — you may need to copy the default “Web Server” certificate template in order to make the private key exportable.

• Export the certificate as a .pfx file using the default values if exporting from Windows OS.

Installing or Updating the Certificate

1. Use OpenSSL to split the certificate into a certificate.crt file and a private.key file:

“openssl pkcs12 -in cert.pfx -nocerts -nodes -out private.key”

“openssl pkcs12 -in cert.pfx -nokeys -out certificate.crt”

2. Navigate to C:\Program Files\Unicon\Scout\ScoutBoard.
3. Rename the existing certificate.crt and private.key files (if present), then copy the new certificate.crt and private.key into that folder.

4. Make a copy of the .env file.
5. Confirm the .env file contains the following two lines. If not, run Notepad as an administrator and add or update them:

Add “NODE_USE_SYSTEM_CA=1” to the bottom of the .env file

Make sure the line “CERTIFICATE=CUSTOM” is present

6. Run “setx NODE_USE_SYSTEM_CA 1 /M” from an administrative prompt to set it as an environment variable.Restart the server or the Scout Board service for the change to take effect.

Note: Certificate-related issues are logged to backend.log, located in C:\Users\Public\Documents\Unicon\Scout\ScoutBoard.