SSL Certificate Setup for HTTPS Access

Overview

Dermi Atlas Professional supports HTTPS to provide encrypted communication between client devices and the server. Because the system runs on a local network IP address, it uses self-signed certificates, generated by the network gateway container when the Atlas system starts.

While HTTP can be used on a trusted local network, HTTPS is recommended for improved security.

Understanding HTTPS in Dermi Atlas

Why Self-Signed?

Public Certificate Authorities (like Let's Encrypt) cannot issue certificates for private local IP addresses (like 192.168.1.100). Therefore, the network gateway acts as its own authority and generates a valid certificate for the specific local IP. Dermi Atlas Manager supplies the certificate configuration and provides the status, download, and regeneration controls.

The Trust Requirement

Because the certificate is self-signed, devices do not trust it by default. Install and trust the certificate on every client device (iPad, laptop, phone) that connects to the system via HTTPS.

Downloading the Certificate

1. Open Dermi Atlas Manager on the host computer.
2. Go to Atlas Status.
3. In the SSL Certificate section, click Download.
4. Transfer this .crt file to the client devices via email, AirDrop, network share, or USB.

On iPhone and iPad, Dermi Atlas Companion retrieves the certificate without any transfer: the Install Certificate screen downloads it from the host over the local network, guides the profile installation and trust steps, and confirms the result. Manual transfer remains the path for devices that reach Dermi Atlas Professional through Safari alone.

Installation Instructions

Follow the guide for the specific device:

• Installing on Windows
• Installing on macOS
• Installing on iOS (iPhone/iPad)
• Installing on Android

Certificate Rotation

Certificates may need to be rotated (regenerated) if:

• The host computer's IP address changes.
• The certificate is nearing expiration.

Automatic: When the host IP changes, Dermi Atlas Manager adds the new IP to the certificate and schedules regeneration; the new certificate is generated on the next Atlas system start. The gateway also regenerates the certificate on its next start whenever the existing certificate is invalid or is within 30 days of expiry, so an approaching expiration does not require the manual flow below.

Manual: Open the SSL Certificate section in Dermi Atlas Manager, expand Certificate Details, then under Certificate Regeneration select Schedule. Confirm by typing the requested phrase. Regeneration is scheduled, not immediate; restart the Atlas system from the Atlas Control card (Stop then Start, or Restart) so the gateway generates the new certificate on its next boot. Afterward, download the new certificate and reinstall it on all devices.

Note: After any rotation, the old certificate becomes invalid. Download the new certificate and reinstall it on all devices. This is why using a Static IP is highly recommended.