GT7 Lite

The certificates stored in the GT7 Lite are displayed on this page. The certificates are used to verify the authenticity and integrity of persons and/or objects, especially when communicating over the Internet or network, which can prevent unauthorized access and manipulation.

Various options are displayed above the list. Click on the Show certificates option to display the installed certificates. To add a new certificate, simply drag the certificate file (file extension .PEM) to the Drop certificate here (PEM format) field in the corresponding window (depending on the selected function, e.g. Add CA certificates like in the image above).

The following functions can be performed via the other options in this menu.

Add CA certificates: Add a certificate issued by a certification authority (CA). To do this, drag the file with the certificate (in PEM format) onto the one provided in this window and click Add CA certificates.

If you click on Restore recommended CA certificates, the certificates are reset to or restored to the default certificates installed when the device was delivered.

Generate new self-signed certificate: If encrypted communication between the device and the server is being used (via TLS over HTTPS or WSS), the device requires a certificate. It is recommended that you use a certificate issued by a certification authority. Alternatively, you can create a certificate yourself by clicking on Generate new self-signed certificate. The device must then be restarted.

Generate CSR:  To have a server certificate or an 802.1X user certificate created by a certification authority, you can create a Certificate Signing Request (CSR). Enter your data, e.g., company name, country, and IP, here.

Install server certificate: If the device is acting as a web server, which acts as a "client" and establishes the connection to the "server", a certificate is required on the server, i.e., on the GT7 Lite, for a secure connection using TLS.

You can create this certifcate using CSR and then install it here. To do this, drag the certificate file onto the field provided and click on Install server certificate.

Install 802.1X certificates: Here, you can install an official certificate from a certification authority for authentication using 802.1X. To do this, drag the file with the certificate to the field provided and click Install 802.1X certificates.

Install 802.1X user certificate: Here, you can install a certificate previously created using CSR for authentication using 802.1X. To do this, drag the file with the certificate to the field provided and click on Install 802.1X user certificate".

Simple Certificate Enrollment Protocol (SCEP): Certificates using the Simple Certificate Enrollment Protocol (SCEP) can be installed here. The following window is displayed:

Below the Configuring SCEP link, the status of the SCEP connection (“Server Info”) is displayed. If “Disabled” is shown here, the SCEP function is not activated. If the SCEP function is enabled, a server notification is displayed, e.g., “Enabled” indicates a successful connection or “Host not found” if the server connection could not be established.