Installing License and Certificate

Recommended guidance

Install AIQ licensesrequires a valid license file and certificatesa usingvalid the approved customer-specific files and the processcertificate for the deployedserver that hosts the Controller.

Install License

License files are distributed by the Appvance Customer Success Team or Appvance Support. Be sure that you have been provided a license file before you proceed.

1. From your Appvance IQ URL, login and select Global Options > Admin Options > License (tab).
   
2. Click Upload License.
3. Browse to the license file provided by Appvance and click Open to load the license file.
   

 

Install Appvance Certificate

Every Appvance Controller requires a valid certificate. You may provide and install your own server certificate, or update and use the Appvance-provided certificate.

Provide your own certificate

1. Copy your certificate to: <AIQ install path>\sahi\
2. Install your certificate in Trusted Root Certification Authorities.
   See the Microsoft site for more information on Trusted Root Certification Authorities.

Update the Appvance-provided certificate

About the Appvance Certificate

The default Appvance certificate points to localhost and must be updated to point it to your specific IP or DNS. To do so, follow the steps in this topic.

Important

• These steps are only to be performed on the Appvance Controller machine
• The certificate creation steps currently ONLY work on Windows, however, the generated certificate is valid for Linux/Mac as well
• If using EC2 and you stop and restart the server, the DNS will be lost and you must repeat this process
• Once installed on the Appvance Controller, configure the certificate on client machines using How to Install Appvance IQ on Windows (GraalVM 11 Based) (related topics: Firefox configuration to work with https and Windows configuration to work with https)

Generate an Appvance Certificate

This procedure assumes that your Appvance Control machine is already set up and running.

1. On the Appvance Controller machine, login to AIQ.
2. Navigate to Global Options > Admin Options > Certificate (tab).
   
3. Enter the DNS or IP of the AIQ version.controller. TreatDo licensenot files,enter privatea keys,protocol or a port. For example: ec2-12-21-23-23.us-west-2.compute.amazonaws.com
4. Click Update Certificate and certificatesReboot.
   
5. After asa sensitivesuccessful operationalreboot, assets.please

   Beforeuse installation

   a
   • Confirmnew browser window and navigate to the AIQ version,Controller hostfor name,the licensecertificate scope,to expiration,take effect. The browser may fail to load the IP address, the certificate still generate.
   • Appvance generates the certificate, with a valid key store, inside the Appvance Controller machine's TestNode\certs directorySpaces and environment.
   • Backperiods upare currentreplaced licensewith and certificate files before replacing them.
   • Verify certificate chain, private key ownership, file permissions, and trust requirements.
   • Schedule a maintenance window if services must restart.

   Validation workflow

   1. Install files'_' in the approvedfile location.name.
   7. Restart onlythe requiredAppvance services on Appvance Controller machine.
   8. Browse to <AIQ services.
   3. Confirminstall login, HTTPS access,directory>\sahi and licensedouble-click status.appvance.cer
   9. ReviewClick logsInstall Certificate.
   10. Select Current User and click Next.
   11. Select Place all certificates in the following store and click Browse.
   12. Select Trusted Root Certification Authorities and click OK.
   13. Click Next.
   14. Click Finish.
   15. When the Certificate Import Wizard window appears, indicating the import was successful, click OK.
   16. Click OK.

   Configuring Port 8443

   Once installed, you need to configure Port 8443 for certificate,public trust,access.

   permission,
   1. In orWindows expirationSettings, errors.open the Network and Internet. Select Advanced network settings.
      
   2. Select the Windows Firewall option.
      
   3. Select Advanced settings.
      
   4. Select Inbound Rules.
      
   5. In the Action tab, select New Rule.
      
   6. In Rule Type, select Port.
      
   7. In Protocol and Ports, select TCP and specify the local port as 8443.
      
   8. In Action, select Allow the connection.
      
   9. In Profile, select all the options.
      
   10. Name the port.
       
   11. Click Finish.

   The AIQ controller firewall requires specific TCP ports open. Find the complete list in .Appvance IQ Production System Requirements.

   ---

   Last updated: OctoberJuly 7,31, 20262024

   If you have any feedback on this topic, please contact us at documentation@appvance.ai