SSL Certificate Setup for HTTPS Access

Dermi Atlas Professional offers an HTTPS address, on which connections between devices and the host computer are encrypted with TLS 1.2 or TLS 1.3. Public certificate authorities cannot issue certificates for addresses on a private network such as 192.168.1.100, so Atlas issues its own certificate for the host computer. Devices do not trust it by default: install and trust it on every computer, phone, and tablet that opens Atlas over HTTPS, at the operating system level rather than only in the browser.

The HTTP address works without a certificate and is unencrypted; HTTPS is recommended wherever the network includes Wi-Fi or is shared.

The SSL Certificate Card

The SSL Certificate card on the Atlas Status page of Dermi Atlas Manager shows the certificate:

• Common Name, Valid Until, and Days Remaining. The certificate is valid for ten years and renewed automatically when Atlas starts within 30 days of its expiry.
• Certificate Details, which expands to show the IP addresses the certificate covers, its Fingerprint, and Certificate Regeneration.
• Installation Requirements, a short checklist. View Docs at the bottom of the card opens this article.

Downloading the Certificate

1. Open Dermi Atlas Manager on the host computer and go to Atlas Status.
2. On the SSL Certificate card, select Download and save the file, named dermi-atlas-professional.crt by default.
3. Transfer the file to each device by email, AirDrop, a network share, or USB.

On iPhone and iPad, Dermi Atlas Companion downloads the certificate directly from the host computer and guides the installation, with no file transfer.

Installing the Certificate

Follow the guide for each device:

• Installing SSL Certificates on Windows
• Installing SSL Certificates on macOS
• Installing SSL Certificates on iPhone and iPad
• Installing SSL Certificates on Android

Replacing the Certificate

Atlas creates a new certificate in two cases:

• New host address: When Atlas starts from Atlas Manager on an address the certificate does not cover, the new certificate is created during that start and covers the new address as well as the earlier ones. After the computer restarts on a new address, select Restart on the Atlas Control card to trigger this. A static IP address avoids it; see Configuring a Static IP Address for Dermi Atlas Professional.
• On request: Expand Certificate Details and select Schedule next to Certificate Regeneration. Type REGENERATE CERTIFICATE and select Schedule Regeneration. The row then reads "Scheduled for next restart"; select Restart on the Atlas Control card to create the certificate, or Cancel Regeneration to keep the current one.

After a new certificate is created, download it again, install it on every device, and remove the previous certificate from each device. The device guides describe both steps. When Atlas is retired, remove the certificate from every device that trusts it.