Preparing the .p12 server certificate

OpenSSL converts a .pem certificate file to a .p12 certificate file. The display recognizes this format.
Prerequisites: You are working in Workbench running on a PC. You are connected to the station that manages the display device.
  1. Download the appropriate version of OpenSSL for Windows and install it.
    Multiple sites provide pre-compiled executables. For example, you can download it from here: https://slproweb.com/products/Win32OpenSSL.html.

    More information about OpenSSL is available here: https://www.openssl.org/source/

    This YouTube video provides a tutorial for setting up OpenSSL: https://www.youtube.com/watch?v=jSkQ27sTto0

  2. Follow the instructions to install OpenSSL.
  3. Open an OpenSSL command prompt and change your directory to the folder that contains the certificate you exported, for example: cd\certs.
  4. To run the OpenSSL conversion from the command prompt, type this command and press Enter.
    openssl pkcs12 -export -out cert.p12 -in <your cert> -inkey <your cert>.pem

    The output certificate name must be cert.p12.

    OpenSSL prompts you to enter the pass phrase for the Niagara 4.9 (or earlier) certificate you exported with the private key.
  5. Do one of the following:
    • For Niagara 4.9, enter the password you created when you exported the certificate with its private key.
    • For Niagara 4.10, press Enter.
    OpenSSL prompts you to create and confirm its password. Both certificates with and without an export private key require this .p12 password.
  6. Enter, verify and record this password in a safe place.
    OpenSSL creates a new certificate with the .p12 extension and associated password.
  7. Confirm that the new certificate exists and move it to a secure location.
    You do not want an unauthorized person to have access to this certificate.
The next step is to install the .p12 certificate in the display.