Install AIQ License and Certificate - Duplicate Review

AIQ

Recommended requires a valid license file and a valid certificate for the server that hosts the Controller.

Install Licenseguidance

License files are distributed by the Appvance Customer Success Team or Appvance Support. Be sure that you have been provided a license file before you proceed.

1. From your Appvance IQ URL, login and select Global Options > Admin Options > License (tab).
   
2. Click Upload License.
3. Browse to the license file provided by Appvance and click Open to load the license file.
   

 

Install Appvance Certificate

Every Appvance Controller requires a valid certificate. You may provide and install your own server certificate, or update and use the Appvance-provided certificate.

Provide your own certificate

1. Copy your certificate to: <AIQ install path>\sahi\
2. Install your certificate in Trusted Root Certification Authorities.
   See the Microsoft site for more information on Trusted Root Certification Authorities.

Update the Appvance-provided certificate

About the Appvance Certificate

The default Appvance certificate points to localhost and must be updated to point it to your specific IP or DNS. To do so, follow the steps in this topic.

Important

• These steps are only to be performed on the Appvance Controller machine
• The certificate creation steps currently ONLY work on Windows, however, the generated certificate is valid for Linux/Mac as well
• If using EC2 and you stop and restart the server, the DNS will be lost and you must repeat this process
• Once installed on the Appvance Controller, configure the certificate on client machines using How to Install Appvance IQ on Windows (GraalVM 11 Based) (related topics: Firefox configuration to work with https and Windows configuration to work with https)

Generate an Appvance Certificate

This procedurepage assumes that your Appvance Control machine is already set up and running.

1. On the Appvance Controller machine, loginappears to AIQ.
2. Navigate to Global Options > Admin Options > Certificate (tab).
   
3. Enter the DNS or IP ofduplicate the AIQ controller.license Doand notcertificate enterinstallation topic. Keep only one authoritative article when possible, and consolidate customer-neutral guidance into the primary license/certificate page.

   Use this page only if

   • It documents a protocolversion-specific or aenvironment-specific port. For example: ec2-12-21-23-23.us-west-2.compute.amazonaws.comvariation.
   • ClickThe Updatesteps Certificatediffer from the primary license/certificate article.
   • The page is needed temporarily during migration cleanup.

   Consolidation checklist

   1. Compare this article with the primary license and Reboot.
      certificate page.
   2. AfterMove aunique successfulsupported reboot,content pleaseinto usethe aauthoritative newpage.
   3. Remove browserobsolete windowscreenshots, duplicate steps, and navigateold to the AIQ Controller for the certificate to take effect. The browser may fail to load the IP address, the certificate still generate.paths.
   4. AppvanceDelete generatesor theredirect certificate,this withpage aafter validcontent keyowners store,confirm insideit theis Appvance Controller machine's TestNode\certs directorySpaces and periods are replaced with '_' in the file name.
   7. Restart the Appvance services on Appvance Controller machine.
   8. Browse to <AIQ install directory>\sahi and double-click appvance.cer
   9. Click Install Certificate.
   10. Select Current User and click Next.
   11. Select Place all certificates in the following store and click Browse.
   12. Select Trusted Root Certification Authorities and click OK.
   13. Click Next.
   14. Click Finish.
   15. When the Certificate Import Wizard window appears, indicating the import was successful, click OK.
   16. Click OK.

   Configuring Port 8443

   Once installed, you need to configure Port 8443 for public access.

   1. In Windows Settings, open the Network and Internet. Select Advanced network settings.
      
   2. Select the Windows Firewall option.
      
   3. Select Advanced settings.
      
   4. Select Inbound Rules.
      
   5. In the Action tab, select New Rule.
      
   6. In Rule Type, select Port.
      
   7. In Protocol and Ports, select TCP and specify the local port as 8443.
      
   8. In Action, select Allow the connection.
      
   9. In Profile, select all the options.
      
   10. Name the port.
       
   11. Click Finish.redundant.

   The AIQ controller firewall requires specific TCP ports open. Find the complete list in .Appvance IQ Production System Requirements.

   ---

   Last updated: JulyOctober 31,7, 20242026

   If you have any feedback on this topic, please contact us at documentation@appvance.ai