Install AIQ License and Certificate

Recommended guidance

Install AIQ requires a valid license filelicenses and acertificates validusing certificatethe approved customer-specific files and the process for the serverdeployed thatAIQ hostsversion. theTreat Controller.license files, private keys, and certificates as sensitive operational assets.

InstallBefore Licenseinstallation

License

• Confirm AIQ version, host name, license scope, expiration, and environment.
• Back up current license and certificate files arebefore distributedreplacing bythem.
• Verify thecertificate Appvancechain, Customerprivate Successkey Teamownership, orfile Appvancepermissions, Support.and Betrust sure that you have been providedrequirements.
• Schedule a licensemaintenance filewindow beforeif youservices proceed.must restart.

Validation workflow

1. From your Appvance IQ URL, login and select Global Options > Admin Options > License (tab).
   
2. Click Upload License.
3. Browse to the license file provided by Appvance and click Open to load the license file.
   

 

Install Appvance Certificate

Every Appvance Controller requires a valid certificate. You may provide and install your own server certificate, or update and use the Appvance-provided certificate.

Provide your own certificate

1. Copy your certificate to: <AIQ install path>\sahi\
2. Install your certificate in Trusted Root Certification Authorities.
   See the Microsoft site for more information on Trusted Root Certification Authorities.

Update the Appvance-provided certificate

About the Appvance Certificate

The default Appvance certificate points to localhost and must be updated to point it to your specific IP or DNS. To do so, follow the steps in this topic.

Important

• These steps are only to be performed on the Appvance Controller machine
• The certificate creation steps currently ONLY work on Windows, however, the generated certificate is valid for Linux/Mac as well
• If using EC2 and you stop and restart the server, the DNS will be lost and you must repeat this process
• Once installed on the Appvance Controller, configure the certificate on client machines using How to Install Appvance IQ on Windows (GraalVM 11 Based) (related topics: Firefox configuration to work with https and Windows configuration to work with https)

Generate an Appvance Certificate

This procedure assumes that your Appvance Control machine is already set up and running.

1. On the Appvance Controller machine, login to AIQ.
2. Navigate to Global Options > Admin Options > Certificate (tab).
   
3. Enter the DNS or IP of the AIQ controller. Do not enter a protocol or a port. For example: ec2-12-21-23-23.us-west-2.compute.amazonaws.com
4. Click Update Certificate and Reboot.
   
5. After a successful reboot, please use a new browser window and navigate to the AIQ Controller for the certificate to take effect. The browser may fail to load the IP address, the certificate still generate.
6. Appvance generates the certificate, with a valid key store, inside the Appvance Controller machine's TestNode\certs directorySpaces and periods are replaced with '_'files in the fileapproved name.location.
2. Restart theonly Appvancerequired servicesAIQ on Appvance Controller machine.services.
3. BrowseConfirm tologin, <AIQHTTPS install directory>\sahiaccess, and double-clicklicense appvance.cerstatus.
4. ClickReview Install Certificate.
10. Select Current User and click Next.
11. Select Place all certificates in the following store and click Browse.
12. Select Trusted Root Certification Authorities and click OK.
13. Click Next.
14. Click Finish.
15. When the Certificate Import Wizard window appears, indicating the import was successful, click OK.
16. Click OK.

Configuring Port 8443

Once installed, you need to configure Port 8443logs for publiccertificate, access.

trust,

1. Inpermission, Windowsor Settings,expiration open the Network and Internet. Select Advanced network settings.
   
2. Select the Windows Firewall option.
   
3. Select Advanced settings.
   
4. Select Inbound Rules.
   
5. In the Action tab, select New Rule.
   
6. In Rule Type, select Port.
   
7. In Protocol and Ports, select TCP and specify the local port as 8443.
   
8. In Action, select Allow the connection.
   
9. In Profile, select all the options.
   
10. Name the port.
    
11. Click Finish.errors.

The AIQ controller firewall requires specific TCP ports open. Find the complete list in .Appvance IQ Production System Requirements.

---

Last updated: JulyOctober 31,7, 20242026

If you have any feedback on this topic, please contact us at documentation@appvance.ai