No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

eSight V300R009C00 Single-Node System Software Installation Guide (SUSE Linux) 10

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
What Do I Do If eSight Displays a Security Certificate Error During Login

What Do I Do If eSight Displays a Security Certificate Error During Login

Symptom

The web browser displays a security certificate error when users log in to eSight.

  • The following figure shows the security certificate error prompted by Internet Explorer.

  • The following figure shows the security certificate error prompted by Firefox.

  • The following figure shows the security certificate error prompted by Chrome.

Possible Causes

The security certificate is incorrect or is not installed. You need to install a valid security certificate.

Procedure

  • Method 1: Deploy the certificated authorized by the Certificate Authority (CA) to eSight.
    1. Contact the eSight server administrator to apply for a certificate from the CA.
    2. Deploy the CA certificate on eSight. For details, see Maintenance Guide > Security Maintenance > Security Certificates > Deploying a Security Certificate > Using the Certificate Tool to Import the CA Certificate in eSight Product Documentation.
NOTE:

When you access eSight using a domain name, you must apply for a certificate corresponding to the domain name and deploy the certificate to solve the incorrect security certificate problem prompted by the browser.

  • Method 2: Set the certificate of eSight to a trust certificate of the browser.
    • Install the security certificate in Internet Explorer.
      1. Copy the eSight installation directory/AppBase/etc/certificate/application/ca/ca.crt file from the eSight server to the local PC.
      2. Open the Internet Explorer, log in to eSight, and click Tools > Internet Options.
      3. In the Internet Options dialog box, select the Certificate on the Content tab page.
      4. Click the Trusted Root Certification Authorities tab in the Certificates dialog box and click Import.
      5. In the Certificate Import Wizard dialog box, click Next.
      6. Click Browse and select the CA certificate ca.crt of eSight.
      7. Click Next.
      8. Select Place all certificates in the following store, and click Browse.
      9. In the Select Certificate Store dialog box, select Trusted Root Certification Authorities and click OK.
      10. Click Next.
      11. In the Certificate Import Wizard dialog box, click Finish.
      12. In the Security Warning dialog box, click Yes.
      13. In the Certificate Import Wizard dialog box, click OK.
      14. Close Internet Explorer and open it again to log in to eSight.

        If the security certificate imported is invalid, the security certificate error will persist. On the security certificate error page, click Continue to this website (not recommended). The eSight login page is displayed for you to log in to the eSight.

    • Install the security certificate in Mozilla Firefox.
      1. Copy the eSight installation directory/AppBase/etc/certificate/application/ca/ca.crt file from the eSight server to the local PC.
      2. Choose Open menu > Options on the menu bar of Firefox.
      3. Click Advanced and choose the Certificates tab.
      4. Click View Certificates.
      5. Choose the Authorities tab in the Certificate Manager window.
      6. Click Import, choose the security certificate, and click Open.
      7. Select Trust this CA to identify websites in the Downloading Certificate dialog box. Click OK.
      8. In the Certificate Manager window, click OK.
      9. Close Mozilla Firefox, open it again, and log in to eSight.
    • Install the security certificate in Chrome.
      1. Copy the eSight installation directory/AppBase/etc/certificate/application/ca/ca.crt file from the eSight server to the local PC.
      2. Choose Settings from the menu bar of the browser.
      3. Click Manage certificates under HTTPS/SSL.
      4. Click the Trusted Root Certification Authorities tab in the Certificates dialog box and click Import.
      5. In the Certificate Import Wizard dialog box, click Next.
      6. Click Browse and select the CA certificate ca.crt of eSight.
      7. Click Next.
      8. Select Place all certificates in the following store, and click Browse.
      9. In the Select Certificate Store dialog box, select Trusted Root Certification Authorities and click OK.
      10. Click Next.
      11. In the Certificate Import Wizard dialog box, click Finish.
      12. If your browser version is Chrome 58 or later, perform the following operations:

        Log in to the server as the root user and run the following commands:

        if [ ! -d /etc/opt/chrome/policies/managed ];then mkdir -p /etc/opt/chrome/policies/managed; fi

        echo "{ \"EnableCommonNameFallbackForLocalAnchors\": true }" >> /etc/opt/chrome/policies/managed/secure.json

      13. Close the Chrome browser, open the Chrome browser again, and log in to eSight.

Suggestion and Summary

Method 1 is recommended. Method 2 may do not work in certain scenarios because Internet Explorer versions differ.

NOTE:
  • If eSight login via multiple subnets has been enabled, the Certificate Error will not be reported when you use the eSight installation IP address to log in to eSight.
  • If eSight is deployed in a remote HA mode, the Certificate Error will not be reported when you use the installation IP address of the active eSight server to log in to eSight.
Download
Updated: 2019-09-02

Document ID: EDOC1100011860

Views: 103974

Downloads: 158

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next