Installing SSL cert on ISY99i

[mad_scot]

Having an issue generating a self signed cert on iSY99i

 

Model: ISY 99i 256 IR

Platform: ISY-C-99

Version: 3.2.6

 

I have no issue accessing externally via http or https but get the pop up warning about certificate. I can access the java app and request self signed cert but all I get is the Win 7 spinning circle. I cleared Java cach (using Java 7) - same issue. Tried on Chrome and IE8 with same result.

 

It seems others have the issue too:

viewtopic.php?f=27&t=7817

 

Also, I cannot generate a self signed cert or request for a CA, as the cursor just sits there spinning, and it never goes anywhere...

 

Anyone have any advice for me. I'm new to certs but am well versed otherwise.

 

Thanks

 

mad_Scot

 

 

viewtopic.php?f=27&t=7817

[Michel Kohanim]

Hi mad_scot,

 

Are you local to your ISY?

 

With kind regards,

Michel

[mad_scot]

Yes - both PC and ISY99 were on local network, albeit PC was connected wirelessly and ISY99 is directly hooked into router port - same subnet, router for wireless and ethernet networks.

[Michel Kohanim]

Hello mad_scot,

 

Is this a 99 or 994?

 

Are you using https://www.universal-devices.com/ssl/insteon? Are you certain that you have accepted the security warning for Bouncy Castle library?

 

With kind regards,

Michel

[mad_scot]

from original post - take from help-about in admin console

 

Model: ISY 99i 256 IR

Platform: ISY-C-99

Version: 3.2.6

[Michel Kohanim]

Thanks. Did you accept the security warning for Bouncy Castle library?

 

With kind regards,

Michel

[mad_scot]

bouncy castle library warning - no - never saw anything like that.

[mad_scot]

Here's sequence.

 

Log onto 99i. Click Admin console

Log into admin console.

Then get pop up with titel "security warning", "ISY is currently configured with the default SSL cart." Two buttons - Disable Internet access and Request/manage SSL certs.

 

Click Request/Manage SSL cert

New browser window opens

Then get popup "Warning - security", "Java has discovered application components the could indicate a security concern. Name: com.universaldevices.isy.keygen.ui.S ...

"Block potentiall unsafe components being run?"

CLICK No

ISY Config util opens - log in again

CLICK SSL Cert. management

CLICK generate / install new self signed cert

Cert parameters dialog opens

I enter my Dyndns address

 

Then guess what it worked!

[badman85283]

I am trying to manage SSL certs on 99i. Have firmware 3.3.10 and latest Java version. When I try to request SSL certs, i get the following error - Can you hep

 

Java Plug-in 10.51.2.13

Using JRE version 1.7.0_51-b13 Java HotSpot Client VM

User home directory = C:\Users\Praveen

----------------------------------------------------

c: clear console window

f: finalize objects on finalization queue

g: garbage collect

h: display this help message

l: dump classloader list

m: print memory usage

o: trigger logging

q: hide console

r: reload policy configuration

s: dump system and deployment properties

t: dump thread list

v: dump thread stack

x: clear classloader cache

0-5: set trace level to

----------------------------------------------------

Resource http://crl.globalsign.net/Root.crl has future expires: Sun Apr 27 19:37:49 PDT 2014 update check skipped.

Resource http://crl.globalsign.net/primobject.crl has future expires: Sun Apr 27 19:37:49 PDT 2014 update check skipped.

Resource http://crl.globalsign.net/ObjectSign.crl has future expires: Mon Apr 21 06:49:07 PDT 2014 update check skipped.

Missing Application-Name manifest attribute for: https://www.universal-devices.com/ssl/sslmgr.jar

[Michel Kohanim]

Hello badman85283,

 

I am so so very sorry. Since 99 was discontinued, the application that allowed one to generate SSL certificates also expired. I am so so sorry.

 

With kind regards,

Michel

[jlokanis]

Wait, are you saying that we can no longer access the admin console on our 99i units?

I can understand that you discontinued the unit and are not offering any new features or bug fixes, but I expect the unit to continue to work as before without losing all ability to manage it. This is unacceptable. I suggest you find a way to correct this ASAP or start sending all 99i owners a free 994i unit.

[Michel Kohanim]

Hi jlokanis,

 

Apologies for not being clear. I didn't say that you can no longer access the Admin Console for 99. You can always use:

http://isy.universal-devices.com/994i/4.1.2/ or

http://isy.universal-devices.com/994i/4.1.2/admin.jnlp

 

The main issue is whether or not you can create SSL certificates for 99 and, unfortunately, that's no longer possible.

 

With kind regards,

Michel

[badman85283]

Do you have an exchange program for 99i now that it is not supported?

[LeeG]

badman85283

 

There have been some upgrade programs since the 99i was frozen more than a year ago. Click the Buy tab on the UDI web site. Select Universal Devices, scroll to the bottom of the page for the 99i to 994i upgrade options.

.