Avoiding Manual SSL Installation
How to avoid having to manually add SSL certificates
Although you can install ARDIs security certificates manually, it’s a slow, manual process – particularly when you have large numbers of mobile devices.
There are a number of techniques you can use to give secure access to your ARDI server without needing to manually install our certificates on each device.
You can deploy the Optrix SSL certificates via your enterprise device-management system, if you happen to have one.
For Android, iOS and Chromebook devices, you could use Google Workspaces
Windows devices are usually managed by Group Policy
MacOS and Linux systems offer several different MDM solutions, depending on your needs and budget.
Large organisations may already have their own mechanisms for creating and distributing their own self-signed certificates.
Using your own certificates instead of those provided can increase security and ensure people don’t need to download any additional security certificates to access the server.
You can purchase SSL certificates from a range of providers.
Because these certificates are offered by companies that your devices already trust, there’s no need to add any additional certificates to client devices. These will incur a yearly fee.
Online services such as LetsEncrypt offer free SSL certificates for publicly accessible websites.
However, most ARDI servers are located in a protected, internal network. As such, it can be very challenging (if not impossible) to obtain a free certificate for these servers, as the ARDI system isn’t available from the Internet under the domain names you want to use.