How To Create HCP HTTPS SSL Cert

The document provides instructions for creating an HTTPS certificate for HikCentral Professional (HCP). It involves downloading and installing OpenSSL, editing the OpenSSL configuration file, generating a certificate signing request, signing the request to create a private key and signed certificate, importing the certificate into HCP, and exporting/importing the certificate into browsers to trust the HCP domain. The process ensures HTTPS communication with HCP is secure.

Uploaded by

sromero5897108

We take content rights seriously. If you suspect this is your content, claim it here.

Available Formats

Download as PDF, TXT or read online on Scribd

0% found this document useful (0 votes)

332 views7 pages

How To Create HCP HTTPS SSL Cert

Uploaded by

sromero5897108

We take content rights seriously. If you suspect this is your content, claim it here.

Available Formats

Download as PDF, TXT or read online on Scribd

You are on page 1/ 7

Title: How to create HCP HTTPS cert Version: v1.

0 Date: 03/21/2023
Product: HikCentral Professional Page: 1 of 7

Preparation

1) OpenSSL
2) OpenSSL.cnf (config file)
3) HCP testing environment

Title (How to create HCP HTTPS Cert)

1. Download & Install OpenSSL

1) Download from http://wiki.overbyte.eu/wiki/index.php/ICS_Download

2) Pick the latest version.

3) Extract from zip file to (eg. D:\Hikvision\OpenSSL\)
4) Add the path to Environment Variables
i. Windows Search “View advanced system settings”
ii. Select “Environment Variables”
iii. Under “System Variables” Select and Edit “Path”
iv. Click on “New” insert the path (eg. D:\Hikvision\OpenSSL\)
2. Download OpenSSL.cnf
1) Download Link: https://drive.ticklink.com/hcs/controller/hik-
manage/fileDownload?link=qw8QHPI2
Passcode:1314520
2) Keep the openssl.cnf to (eg. D:\Hikvision\Cert\)

© Hangzhou Hikvision Digital Technology Co.,Ltd. All Rights Reserved.

No.555 Qianmo Road, Binjiang District, Hangzhou 310052, China • Tel: +86-571-8807-5998 • Fax: +1 909-595-0788
E-Mail: [email protected] • www.hikvision.com
Title: How to create HCP HTTPS cert Version: v1.0 Date: 03/21/2023
Product: HikCentral Professional Page: 2 of 7

3. Edit the IP.1 and DNS.1

Note:
It can be multiple IP and DNS. (Eg. IP.2= & DNS.2=)

© Hangzhou Hikvision Digital Technology Co.,Ltd. All Rights Reserved.

4. Command in CMD
1) SET OPENSSL CONF=D:\Hikvision\Cert/openssl.cnf
2) cd /d D:\Hikvision\Cert\
3) openssl req -new -nodes -newkey rsa:2048 -keyout demo.key -out demo.csr
4) sg
5) Fill detail
Eg.
State or Province Name : Singapore
Locality Name : Singapore
Organization Name : Hikvision
Organizational Unit Name : Technical Support
Common Name : fake DNS example: pcname.hikvision.com
Email Address : [email protected]
Password: abcd1234

6) openssl x509 -signkey demo.key -in demo.csr -req -days 365 -out demo.pem -extfile
openssl.cnf -extensions v3_ca

Note:
365 is the cert expiry perior, it can be change & In “D:\Hikvision\Cert\” will have 4 files in total.

© Hangzhou Hikvision Digital Technology Co.,Ltd. All Rights Reserved.

5. Update Key
1) Copy entire key from demo.key and paste it to demo.pem

2) As screenshot below:

Note:
Remember to save the demo.pem

6. Import demo.pem to HCP

1) HCP WebClient - System Configuration - Security - Transfer Protocol - HTTPS - New
Certificate - Upload

Important Note:
HCP SYS Service will restart after Save

7. Clear Web Browser Cache

8. Export Cert (It can be any PC)

1) Click on “Not secure” – “Details” – “Export”

9. Save the Export file under .crt format

10. Run the .crt

1) Store Location: Local Machine
2) Place the cert under “Trusted Root Certification Authorities”
11. Completed.

Note:
Access to IP.1 or DNS.1 shoudn’t prompt not secure for 365days

See Far, Go Further

HIKVISION Technical Support

No.555 Qianmo Road, Binjiang District, Hangzhou 310052, China • Tel: +86-571-8807-5998 • Fax: +1 909-595-0788
E-Mail: [email protected] • www.hikvision.com