Validation of Nx server certificate

Completed

Comments

15 comments

  • Avatar
    Norman - Nx Support

    Dear Leen Paans,

    I hope this message finds you well. I wanted to share some information regarding self-signed certificates that may be helpful to you.

    Typically, self-signed certificates do not need to be removed unless you wish to replace them with an issued certificate. If you do decide to remove the certificate, simply restarting the mediaserver application should automatically generate a new self-signed certificate.

    Please feel free to reach out if you have any further questions or concerns.

    Best regards.

    0
    Comment actions Permalink
  • Avatar
    Leen Paans

    Dear Norman, thanks for your input. Problem is that with connecting to server I faced the Nx message "Cannot verify the identity of ". With "I trust this server", connection could be established. So I tried to get updated server certificate according instruction of Nx Server SSL certificate by removing of expired default.perm. However a new certificate with an updated expiration did not appear. With best regards.

    0
    Comment actions Permalink
  • Avatar
    Norman - Nx Support

    Hello Leen Paans,

    It's important to note that self-signed certificates cannot be verified for their identity, unlike issued certificates. In order to use a self-signed certificate, you will need to confirm that you trust the server by selecting "I trust this server". This is expected behavior. This process will repeat each time the certificate voids, but it's important to know that the renewal of self-signed certificates is now an automated process with Nx Witness v5.0.

    While it's not necessary to delete any certificate, if you happen to delete one, a new certificate will be created once you restart the mediaserver application and connect with the client to that specific mediaserver.

    Please let me know if you have any questions or concerns regarding this matter. I'm always here to help.

    Best regards.

    PS. You refer to instructions, can you clarify where you found these instructions, so we might be able to improve these instructions?

    0
    Comment actions Permalink
  • Avatar
    Leen Paans

    Hello,
    In reply to your PS, please find information as included.

    https://support.networkoptix.com/hc/en-us/articles/8891786041111-What-to-do-when-a-cloud-connected-system-shows-unreachable-or-offline-


    Note: Re. your reply: "I trust this server". This is expected behavior. This process will repeat each time the certificate voids, but it's important to know that the renewal of self-signed certificates is now an automated process with Nx Witness v5.0.

    My answer: I have 5.0, but I do not see  an automatic "renewal". With brgds Leen

    0
    Comment actions Permalink
  • Avatar
    Norman - Nx Support

    Dear Leen Paans,

    I've made some adjustments to your message to improve its readability, I hope that's okay with you.

    Regarding your question about the automatic renewal of your certificate, there isn't a button or visual cue to show you when this occurs. Instead, the process happens automatically in the source code of the mediaserver application. Essentially, each time the application starts, it checks if your certificate is valid. If it is, then it's left alone, but if it has expired, it will be renewed. If it doesn't exist, it will be created upon a restart of the mediaserver application. 

    You don't need to take any action for this process to occur, except in the case where you have deleted your .pem file. In that situation, you will need to restart the mediaserver application (not just the client) to make sure the renewal process happens.

    If you need to stop and start the mediaserver application, here's what you'll need to do:

    For Windows:

    1. Open the task manager
    2. Select the "Services" tab
    3. Find the mediaserver application
    4. Right-click on it
    5. Choose "Stop"
    6. Wait for it to stop completely
    7. Right-click on it
    8. Choose "Start"

    For Linux:

    1. Open the terminal (using Ctrl+Alt+T)
    2. Enter the following command: sudo systemctl restart networkoptix-mediaserver.service

    That's all there is to it! Let me know if you have any further questions or concerns.

     

    0
    Comment actions Permalink
  • Avatar
    Leen Paans

    Dear Norman,

    Thanks for your info.

    I followed the instruction, but without success.

    Question: Is Windows Media Player Network Sharing Service the same as the mediaserver (your item 3)?

    Brgds, Leen

    0
    Comment actions Permalink
  • Avatar
    Norman - Nx Support

    Dear Leen Paans,

    Please follow these steps:

    In the tab Services, locate the in the column Name: defaultMediaServer or in the column Description: Network Optix Media Server, right-click on it, and choose the option to stop/start or restart it. This should help you address the concern you're experiencing. See also the image below:

    If you have any further questions or need additional assistance, please don't hesitate to let me know.

    0
    Comment actions Permalink
  • Avatar
    Leen Paans

    Hello Norman, thanks for your quick reply.

    The problem is visible now: the defaultMediaServer is not mentioned on my computer.

    The question is now: how to get the MediaServer on my computer?

    With brgds, Leen

    0
    Comment actions Permalink
  • Avatar
    Norman - Nx Support

    Hi Leen Paans,

    I hope this message finds you well. I wanted to inform you shouldn't get the mediaserver application on your computer. Instead, you should connect to the device where the mediaserver is currently running, and where the certificate was deleted.

    To establish this connection, you can either physically access the device or use a remote connection application like TeamViewer, Anydesk, or similar software.

    Please let me know if you have any further questions or concerns. I'll be happy to assist you.

    0
    Comment actions Permalink
  • Avatar
    Leen Paans

    Hello Norman, I am sorry, but I do not know the where the device for the media server is or should be currently running.

    Brgds, Leen

    0
    Comment actions Permalink
  • Avatar
    Leen Paans

    Hello Norman,

    I found the server! After restarting the server, via my home network, it was working ok. Only for one time. After reconnecting same problem with certificate appeared. So I will investigate again. Keep trying. For the moment I will finish with this issue. Thanks for your support. Brgds, Leen

    0
    Comment actions Permalink
  • Avatar
    Norman - Nx Support

    Hi Leen Paans,

    I hope this message finds you well. I am writing to kindly inquire about the status of the issue you were experiencing. Could you please provide me with an update?

    If the issue has not been resolved yet, I would greatly appreciate it if you could share a screenshot of the notification you received. This will help me better understand the problem and work towards finding a solution as quickly as possible.

    Thank you for your time and attention to this matter. I look forward to hearing back from you soon.

    Best regards.

    0
    Comment actions Permalink
  • Avatar
    Leen Paans

    Hello Norman,

    Thanks for replying.

    One reply: the automatic supply of a new SSL-certificate, after restart the server doesnot work.

    I am trying to get a private SSL-certificate.

    At the moment I am busy with another issue.

    Next week I will resume.

    Best regards.

    0
    Comment actions Permalink
  • Avatar
    Norman - Nx Support

    Dear Leen Paans,

    I hope this message finds you well. Before proceeding with the purchase of a private SSL certificate, I kindly request that you share the requested screenshot with us. By doing so, we can probably can avoid any unnecessary expenses. Thank you for your cooperation.

    If you like, we also can transfer this topic, into a support ticket and login remotely through TeamViewer.

    Best regards,

    0
    Comment actions Permalink
  • Avatar
    Norman - Nx Support

    Certificate was renewed.

    0
    Comment actions Permalink

Post is closed for comments.