12 Replies Latest reply on Apr 18, 2018 12:01 PM by Intel Corporation

    SSL question

    seanblesh

      Hello all,

      I am trying to setup the enterprise version of unite.  This is so mobile can be used.  Is it a requirement that an SSL cert be on the enterprise server?  I can do a self signed cert I assume.  Mobile clients cannot connect so I assume that is the issue.  Server is a win 2012 r2 VM on the same network.  Any help would be appreciated!  Of course under a time crunch.

       

      Sean Blesh

        • 1. Re: SSL question
          Intel Corporation
          This message was posted on behalf of Intel Corporation

          Hello

          Thank you for joining the community.

          We are looking into the information to assist you, could you let us know the version of Intel Unite® that you have installed?

           What is the model of the server and HUB on your configuration?

          Are you able to use the app successfully on your PCs or in your configuration are you going to use only mobile devices?

          If possible please let us know the model on the mobile devices.

          Allow me to share with you the user guide for Intel Unite®.

          https://www.intel.com/content/dam/support/us/en/documents/software/software-applications/Intel_Unite_Enterprise_Deployment.pdf

          On page 67 section 12.4.3 you can find information to establish a trusted relationship with SSL/TLS.

          Regards,        
          Leonardo C.
           

          • 2. Re: SSL question
            seanblesh

            Well I can attach at least the debug file fro a laptop:

             

             

            Searching for _uniteservice._tcp

            Searching for _uniteservice._tcp.ptnet.principledtech.com

            Searching for _uniteservice._tcp.principledtech.com

            [Info] AppDelegate: Server is Optional("uniteservice.ptnet.principledtech.com")

            [StackTrace] ClientDataStream.registerDelegate()

            [Debug] ClientDataStream: RegisterDelegate(): Registering ConnectedViewController

            [StackTrace] ClientDataStream.registerDelegate()

            [StackTrace] ClientDataStream.checkForDelegate()

            [StackTrace] ClientDataStream.registerDelegate()

            [Debug] ClientDataStream: RegisterDelegate(): Registering PrimaryViewController

            [StackTrace] ClientDataStream.registerDelegate()

            [StackTrace] ClientDataStream.checkForDelegate()

            [StackTrace] ClientDataStream.registerDelegate()

            [Debug] ClientDataStream: RegisterDelegate(): Registering ConnectedUsersViewController

            [StackTrace] ClientDataStream.registerDelegate()

            [StackTrace] ClientDataStream.checkForDelegate()

            [StackTrace] FileService.registerConsumer()

            [Debug] PinLookupManager: Attempting to contact ranger server at https://uniteservice.ptnet.principledtech.com/Unite/CCService.asmx

            ----------- Pin Lookup SEND --------

            <?xml version="1.0" encoding="utf-8"?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><LookupPin xmlns="http://tempuri.org/"><Pin>714980</Pin></LookupPin></s:Body></s:Envelope>

            [Debug] PinViewController: pinLookupFailed()

            [Error] PinViewController: Enterprise Server Connection Error -1003: A server with the specified hostname could not be found.

            Searching for _uniteservice._tcp

            Searching for _uniteservice._tcp.ptnet.principledtech.com

            Searching for _uniteservice._tcp.principledtech.com

            [Info] AppDelegate: Server is Optional("uniteservice.ptnet.principledtech.com")

            [StackTrace] ClientDataStream.disconnect()

            [StackTrace] EchoNetStatsService.destroy()

            [StackTrace] UserManager.destroy()

            [StackTrace] PluginManager.destroy()

            [StackTrace] ClientDataStream.destroy()

            [Debug] CDS: Instantiating CDS

            [StackTrace] ClientDataStream.registerDelegate()

            [StackTrace] ClientDataStream.checkForDelegate()

            [StackTrace] ClientDataStream.registerDelegate()

            [StackTrace] ClientDataStream.checkForDelegate()

            [Debug] UserManager: Instantiating UserManager

            [StackTrace] ClientDataStream.registerDelegate()

            [StackTrace] ClientDataStream.checkForDelegate()

            [Debug] PluginManager: Instantiating PluginManager

            [StackTrace] ClientDataStream.registerDelegate()

            [StackTrace] ClientDataStream.checkForDelegate()

            [Debug] EchoNetStatsService: Instantiating EchoNetStatsService

            [StackTrace] ClientDataStream.registerDelegate()

            [StackTrace] ClientDataStream.checkForDelegate()

            [StackTrace] ClientDataStream.setServerValidationInProcess()

            • 3. Re: SSL question
              Intel Corporation
              This message was posted on behalf of Intel Corporation

              Hello seanblesh

              Thank you for your response.
               
              We are looking into the situation in the meantime could you please provide us with the version of Intel Unite® that you have installed?
               
              What is the model of the server and the HUB on your configuration?
               
              Regards,
              Leonardo C.
               

              • 4. Re: SSL question
                seanblesh

                Version 3.2 enterprise all around.  The model of the server is a windows 2012 R2 VM and the hub is a NUC mini box.  Is that enough information?

                • 5. Re: SSL question
                  seanblesh

                  Using a self signed cert.  Still I get an ssl error.

                   

                  Screen Shot 2018-03-27 at 11.47.07 AM.png

                  • 6. Re: SSL question
                    seanblesh

                    problem resolved.  This is KEY FOLKS.  If you do use a self signed cert, it has to be added to the hub as a trusted source and the registry key must be added in order for it to work.  Also pay attention to the version of documentation.  Older versions showed one key to add, the newer showed a different key to add.

                    • 7. Re: SSL question
                      seanblesh

                      well the problem is NOT SOLVED.  Everything works except Apple products.  Mac, iPhone, iPad.  I have a self signed certificate.  Any help would be appreciated!

                      • 8. Re: SSL question
                        Intel Corporation
                        This message was posted on behalf of Intel Corporation

                        Hello seanblesh

                        Thanks for your response.
                         
                        Could you provide us with a picture of the error you are having with the Apple devices?
                         
                        What is the model of the NUC mini box?
                         
                        Regards,
                        Leonardo C.
                         

                        • 9. Re: SSL question
                          Intel Corporation
                          This message was posted on behalf of Intel Corporation

                          Hello seanblesh

                          Allow me to share with you that the SSL configuration has to be done at a server level, that configuration has to be internally at your company/enterprise with the help of your IT department.
                            
                          Regards,
                          Leonardo C.
                           

                          • 10. Re: SSL question
                            dmorlich

                            Hi Sean Blesh

                             

                            If you are using a Self signed certificate you also have to install this on your Apple systems.  If you are using a third party certificate then there is no need to do this step. Based on your description you also will need to install it.

                             

                            Thanks

                            David O

                            • 11. Re: SSL question
                              seanblesh

                              Got it I'll do that now.

                               

                              Sean

                              • 12. Re: SSL question
                                Intel Corporation
                                This message was posted on behalf of Intel Corporation

                                Hello seanblesh

                                I was checking your case and would like to know if have tried the steps provided previously.  
                                 
                                Regards,
                                Leonardo C.