What to do when a Certificate Expires | AMX NI-2000, NI-3000

NetLinx Security and Web Server

3.Restart your computer and launch your browser.

4.Repeat steps 1 - 5 from the previous section to launch the WebControl tab associated with your Master.

5.Click on the G3 panel name link associated with the target panel.

6.A secondary web browser window appears on the screen to notify you that the computer is Loading the Java Virtual Machine.

What to do when a Certificate Expires

Self-generated certificates have a duration period of approximately 30 years. Most externally requested CA certificates are generally valid for a period of approximately 1 - 5 years.

The only way to avoid a CA certificate becoming invalid due to a time expiration is to request

a new certificate from your current CA.

Refer to the Creating a Request for a SSL Server Certificate section on page 83 for more

information on how to request an externally generated certificate.

	92	NetLinx Integrated Controllers

Image 98

AMX NI-2000, NI-3000, NI-4000 instruction manual What to do when a Certificate Expires

Contents

NetLinx Integrated Controllers AMX Limited Warranty and Disclaimer Table of Contents Installation and Upgrading NetLinx Security with a Terminal Connection Troubleshooting 125 NI-2000 Specifications NetLinx Integrated Master Controller Features NI-2000 Specifications Front Panel Components Rear Panel Components D notation is used to explicitly represent a device number Optional Accessories NI-3000 SpecificationsIncluded Accessories Relays IR/Serial Ports Ethernet AXLink Program ICSNet AXLink LED RS-232/422/485 Ports ICSHub OutGreen Compact Flash NI-3000 SpecificationsPower requirements Rear Panel Components One 10-pin 3.5 mm mini-Phoenix female I/O connector Whether to use half duplex or full duplex modeTurns Off when the speed is 10 Mbps Two 8-pin 3.5 mm mini-Phoenix female Relay connector NI-4000 Specifications NI-4000 NetLinx Integrated Controller front view NI-4000 Specifications Rear Panel Components D notation is used to explicitly represent a device number Removable rack ears. Allows for tabletop, under-counter, Pin Black Male Phoenix Connector 3.5mmTwo CC-NIRC IR Emitters FG10-000-11 Front/rear rack mounting Installation Procedures Configuration and Communication Studio to the most recent release Update the Controller and Control Card FirmwareProgram NetLinx Security into the On-Board Master IP recommended Baud Rate Settings on the Configuration DIP Switch Setting the Configuration DIP Switch for the Program PortBaud rate settings Program Run Disable PRD mode Modes and Front Panel LED Blink Patterns Wiring GuidelinesUsing the Configuration DIP switch Modes and LED Blink Patterns Wiring Guidelines NI-4000 & NI-3000@ 900 mA Preparing captive wiresWiring length guidelines Wiring Guidelines NI-2000 @ 700 mA AXlink/PWR connector PWR + GND Top view Using the 4-pin mini-Phoenix connector for data and powerAXlink/PWR connector Local +12 VDC power supply coming from the PSN power supply Program Port, Pinouts, and Signals Program Port Connections and WiringRS-232/422/485 Device Port Wiring Specifications ICSNet RJ-45 Signals ICSNet RJ-45 Connections/WiringRS-232/422/485 Device Port Wiring Specifications RJ-45 Pinout Information EIA/TIA 568 B Ethernet RJ-45 Pinouts and Signals Ethernet 10/100 Base-T RJ-45 Connections/WiringICSHub OUT Pinouts and Signals ICSHub OUT port Ethernet ports used by the Integrated Controllers Relay Connections and WiringEthernet LEDs Ethernet Ports Used by the NetLinx Integrated Controllers Input/Output I/O Connections and Wiring Relay connections Port Wiring Specifications NI-2000 IR/Serial Connections and WiringPort Wiring Specifications NI-4000 and NI-3000 IR/Serial Connector Wiring Specifications NetLinx Control Card Slot Connector NI-4000 unit only NetLinx Control Card 20-pin connector Connections and Wiring Card slots Sample NXC cards Internal Guide slots Installing NetLinx Control Cards NI-4000 OnlyThumbscrews NXC Card Slot faceplate Structure DEV Setting the NetLinx Control Card Addresses NI-4000 OnlyDevicePortSystem DPS 192 384 768 1536 Carefully Detach ALL Connectors from the rear of the unit Compact Flash UpgradesOptional Compact Flash Upgrades Removing NetLinx Control Cards NI-4000 Only Installation of Compact Flash upgrades Closing and Securing the Integrated Controller Removing the Compact Flash card Installing the Integrated Controller into an Equipment Rack Install screws Bracket Rack Mounting Holes Installation and Upgrading Installation and Upgrading Communicating with the Master via the Program Port Before beginning Default setting for these units is Setting the System ValueSelect Diagnostics Device Addressing from the Main menu Using multiple NetLinx Masters Changing the Device Address on a NetLinx Device Device Addressing dialog changing the device value Axcess Devices use Axcess standards Resetting the Factory Default System and Device ValuesRecommended NetLinx Device numbers Obtaining the Master’s IP Address using Dhcp Used to assign an IP Address Used to obtain an Used to assign an IP Address Select Diagnostics Network Addresses from the Main menuAssigning a Static IP to the NetLinx Master Communicating with the On-board Master via an IP Assigning Communication Settings and TCP/IP Settings Verifying the current version of NetLinx Master Firmware Upgrading the On-board Master Firmware via an IP Device and System Number Selected on-board Master Firmware fileFirmware download status Upgrading the NI Controller Firmware via an IP Upgrading the new NI Controller firmware via an IP Sample NetLinx Workspace window Selected Integrated Controller Firmware file NIX000 Firmware download status Upgrading the Control Card Firmware via an IP Selected Control Card Firmware file Firmware download status OS Platform NetLinx Security web browser and feature supportSupported Browser and Feature Compatibility Safari Yes NetLinx Security Terms New Master Firmware Security FeaturesNetLinx Security Terms Accessing the NetLinx Master via its IP Address WebControl Tab Default Security Configuration Default Security ConfigurationWebControl Tab Features Security Tab Security Tab FeaturesFeature Description System section Groups section Security tab Enable Security Security System Features Security tab Add Group Administrator’s user passwordsDefault password can no longer be used to gain access Add Group Entries Security tab Modify Group Modify Group Entries Security tab Group Directory Associations Path Description Valid Directory Association EntriesGroup Directory Association Entries Add User Entries Security Config AccessSecurity tab Add User Sensitive and must be unique Security tab Modify User Modify User Entries Security tab User Directory Associations Must be unique Subdirectories in that user directory Enables access to the user directory and all filesUser Directory Association Entries New user is selected Common Name can not be an IP Address Security tab SSL Server CertificateServer Certificate Entries Create Request Takes the information entered into Information from the certificate currently installed onIs an alpha-numeric string 1 50 characters in length Previous fields and generates its own SSL Certificate Security tab Export Certificate Request Security tab Import Certificate Network Tab System TabShow Devices Tab Master Security Setup Procedures Security tab showing NetLinx Master security options Adding a Group and assigning their access rights Security tab showing the Add Group fields Modifying an existing Group’s access rights Security tab showing the Modify Group access rights fields Showing a list of authorized Groups Deleting an existing Group Adding a Group directory association Security tab showing the Group Directory Associations fields Deleting a directory association Confirming the new directory associationClick the Directory Associations link Adding a User and configuring their access rights NetLinx cannot be used since they already exist Modifying an existing User’s access rights Security tab showing the Modify User Configurations fields Showing a list of authorized Users Deleting a User Adding a User directory association Security tab showing the User Directory Associations fields SSL Certificate Procedures Self-Generating a SSL Server Certificate Request City/province name must be fully spelled out Creating a Request for a SSL Server Certificate State/province name must be fully spelled out Before importing a CA server certificate, you must YOU can not Request Another Certificate Until the Previous Display SSL Server Certificate Information Regenerating an SSL Server Certificate Request Common Steps for Requesting a Certificate from a CA Before exiting the Master and beginning another session NetLinx Security and Web Server Accessing an SSL-Enabled Master via an IP Address Security Alert and Certificate popups Click Next to proceed with the certificate storage process Using your NetLinx Master to control the G4 panel G3 panel G4 panel Using your NetLinx Master to control the G3 panel WebControl VNC installation and Password entry screens What to do when a Certificate Expires NetLinx Security Features NetLinx Security FeaturesInitial Setup via a Terminal Connection Establishing a Terminal connection Accessing the Security configuration options Stop bits1, and Flow control None default is Hardware Terminal Option 2 Display system security options for NetLinx Master Command DescriptionSecurity Options Menu Option 3 Add user Option 4 Edit User Edit User Menu Edit User Menu Option 6 Show the list of authorized users Access Rights MenuOption 5 Delete user Option 7 Add Group Granted to that file PathSubdirectories in the user directory Edit Group menu Delete directory association Option 8 Edit Group Option 9 Delete Group Option 10 Show List of Authorized Groups Option 11 Set Telnet Timeout in secondsOption 12 Display Telnet Timeout in seconds Option 13 Make changes permanent by saving to flash Main Security Menu Main Security Menu Command Help menu Help Menu Options Logging Into a Session Help Security Setup SecurityLogout DevicePortSystem DPS Using the ID ButtonConverting Axcess Code to NetLinx Code Program Port Commands Program Port CommandsPC COM Port Communication Settings GET IP DPS Reboot DPSSendcommand MEM SET URL DPS SET IP DPSSET Time Show Device DPS WindowsTM client programs ESC Pass CodesEscape Pass Codes + + ESC ESC RS232/422/485 Ports Channels LED Disable/Enable SendCommandsRS-232/422/485 SendCommands Linux Telnet client Sendcommand RS2321,CHARD10 Sendcommand DEV,B9MONSendcommand RS2321,B9MON Sendcommand RS2321,CHARDM10 Sendcommand DEV,RXCLR Sendcommand DEV,HSONSendcommand RS2321,HSON Sendcommand RS2321,RXCLR RS-232/422/485 SendString Escape Sequences RS-232/422/485 SendString Escape Sequences IR / Serial Ports Channels IR/Serial SendCommandsIR/Serial SendCommands IR RX Port Channels Sendcommand IR1,CTOF,10 Sendcommand IR1, CH,18Sendcommand IR1,CP,2 Sendcommand IR1,CTON,20 Sendcommand DEV,IROFF Sendcommand DEV, GET ModeSendcommand IR1,GET Mode Sendcommand IR1,IROFF Sendcommand IR1, SET IO Link Sendcommand IR1, PTOF,15Sendcommand IR1, PTON,15 Sendcommand IR1, SET Mode IR Sendcommand IR1,XCHM Sendcommand IR1, XCH Sendcommand IO,GET Input Input/Output SendCommandsSendcommand DEV,GET Input Chan Sendcommand IO,SET Input 1 High Programming 124 Troubleshooting Information SET Ethernet Mode 100 Half SET Ethernet Mode 10 HalfSET Ethernet Mode 10 Full SET Ethernet Mode 100 Full IP section on page 46 for detailed procedures Symptom Solution During the firmware upgradeInstall the last component Process, NetLinx Studio failed to RevisionLast12/10/04