Location

1. To use the Crypto application, the user will need to have the Host Application open.

• When the user logins into FIN, they are directed to the Host Application which where they can select on the Crypto selection on the left-hand screen

      

• Additionally, the user can open the Host Application under the Advanced Apps

Crypto

This is where the superuser can view all the trusted certificates and their information. 

The tools available for the superuser are:

• Trust

• Re-name

• Delete

Trust

By selecting on Trust, the user will be able to add a new trusted certificate. It takes two fields:

• URI - The URI of the server to trust. The URI format scheme is https://host/

• Alias - The alias would be a name for this trusted certificate

Note: The user will need to scroll down the page till the end and will find the Trust button located there

Open

Re-name

By selecting on Re-name, the user will be able to rename the certificate after selecting certificate and also decide whether to keep or force the certificate. 

• New Name - Enter the new name for certificate

• Keep - 

• Force - 

Open

Delete

By selecting on Delete, the user will be able to delete the selected certificate after confirming the below prompt.

Open

Manual funcs

If the user wants to do this process manually, they can do so with the below funcs depending on what they are doing.

These funcs need to be ran via the folio app:

• To trust a URI: cryptoTrustUri({uri: `https://10.10.10.107/`, alias: "Test"}.toGrid)

• To delete a URI: cryptoEntryDelete(@idOfUri)

• To view trusted URI’s: cryptoReadAllKeys()

Adding a certificate

Certificates can be used for HTTPS configuration (see https://finproducts.atlassian.net/wiki/x/AYB97wc), and for establishing an authenticated connection in specific connectors (see MQTT Connector and OPC UA Connector).

To add a certificate:

Using File upload in Folio

• Consolidate your certificate and key into a single .pem file, i.e. mycert.pem

• From Folio Menu, upload your file to Folio

• From Folio Launch, run the following query:

  cryptoAddCert("aliasName", read(file and dis == "mycert.pem").ioReadStr())

  Where aliasName is the alias you want to assign to the certificate, and mycert.pem is your file name.

• You can then Folio Menu the file from Folio for cleanliness.

Pasting the certificate content as string

• From Folio Launch, run the following query:

  cryptoAddCert("aliasName", "-----BEGIN PRIVATE KEY-----\nMIIEvAIBADA...hrgA==\n-----END CERTIFICATE-----")

  Replacing the second function argument with the certificate file content.
  Please note how the certificate content is pasted as a string, included in double quotes, and with “\n” to delimit new lines.

Using filesystem access

• Consolidate your certificate and key into a single .pem file, i.e. mycert.pem

• Copy your certificate in the io folder under your proj folder

• From Folio Launch, run the following query:

  cryptoAddCert("aliasName", ioReadStr(`io/mycert.pem`))

  Where aliasName is the alias you want to assign to the certificate, and mycert.pem is your file name.

• You can then remove the file from the io folder for cleanliness.