The ConnectWise Control forum has moved to ConnectWise University! This forum has been locked and is in read-only mode. Click here for instructions on how to access the new forum.

Welcome Guest! You can not login or register.



Go to last post Go to first unread
#1 Posted : Saturday, July 11, 2015 6:10:49 AM(UTC)

Rank: Advanced Member

Joined: 10/3/2013(UTC)
Posts: 64

Thanks: 2 times
Was thanked: 1 time(s) in 1 post(s)
Where can I get the easiest/cheapest SSL? Can I add it to a existing installation with 100+ unattended clients already deployed? Can you give me step by step instructions? Thank you for your help

#2 Posted : Monday, July 13, 2015 6:29:52 AM(UTC)

Rank: Member

Joined: 2/2/2015(UTC)
Posts: 13
Location: Portland

Cheap is subjective - https://cheapsslsecurity.com/index.html - here they resell certificates from big bigger CA's, I can't vouch for them one way or the other but they are certainly cheap. The issuance and installation any SSL certificates would be the same degree of difficultly (easy). You'll want to search around the forums / help sections some more before asking here for explicit installation instructions, it's part of the wiki.

Since you wouldn't be needing to change your relay port, which is encrypted entirely on its own, switching the web server from http to https should not be too big of a deal.
#3 Posted : Monday, July 13, 2015 8:31:07 AM(UTC)

Rank: Advanced Member

Medals: ScreenConnect Advisor: Focus Group MemberLevel 1: Random Act of Kindness! Received One Thanks!

Joined: 10/14/2013(UTC)
Posts: 89
United Kingdom

Thanks: 19 times
Was thanked: 9 time(s) in 7 post(s)
To buy an SSL cert, first you need to be using a hostname on a domain that you own for your ScreenConnect server, so if you are www.compvisions.com you want your clients to be connecting to your ScreenConnect server on something like remote.compvisions.com.

If you're not using something like remote.compvisions.com, perhaps you're using a Dyn-like DNS service and use compvisions.dyndns.org as your hostname - that's not really good enough so you'll need to change that first. It's easy to change - you just set a CNAME record in your domain name company's DNS control panel so that remote.compvisions.com resolves to compvisions.dyndns.org (give it a really low TTL, like 300, especially if you have a dynamic IP address)... but if you have a static IP address, you don't need to use a CNAME record and DynDNS - you can set an A record to point remote.compvisions.com directly to your IP address.

ScreenConnect's FAQs cover what you need to do to make your existing clients change so that they connect to your new hostname: http://help.screenconnec...nattended_access_clients

Once you've done that, or if you'd already done it, you can buy your SSL cert for remote.compvisions.com - I buy three-year RapidSSL certs for about GBP20 from https://www.namecheap.co...s/rapidssl/rapidssl.aspx

To be able to buy your SSL certificate, you need a Certificate Signing Request (CSR) - to get that, follow the really easy instructions (basically download a program from the ScreenConnect FAQ pages and run it - it does everything for you) at http://help.screenconnect.com/HOWTO-0004.ashx

The tool from ScreenConnect generates the CSR, which you use to buy an SSL cert for remote.compvisions.com. The CSR is a chunk of text which you copy from your PC and paste into the Namecheap (or other SSL provider) website, pay your fee, approve the request by email to prove that you own compvisions.com, and then you get the certificate in an email: the certificate is another chunk of text, which you just copy from the email and paste in to ScreenConnect tool.

Then just open up the port 443 exactly like you did for 8040 on your router, and you're done - https://remote.compvisions.com then works exactly as http://remote.compvisions.com:8041 or http://compvisions.dyndns.com:8041 used to.
#4 Posted : Monday, July 13, 2015 6:34:58 PM(UTC)

Rank: Advanced Member

Medals: Level 2: Lent a Helping Hand! 10 Thanks!

Joined: 12/16/2012(UTC)
Posts: 184
Location: MN, USA

Thanks: 17 times
Was thanked: 21 time(s) in 18 post(s)
I've actually deployed a StartSSL certificate for my SC installation. Have to go through a few verification steps to prove identity/ownership, but the free certificates are good for a year at a time. If you want to pay them for extended validation (where you provide photo ID, etc) you can increase the lifespan of the cert by a year or so.
#5 Posted : Tuesday, July 14, 2015 9:27:46 AM(UTC)

Rank: Newbie

Joined: 7/14/2015(UTC)
Posts: 2
United Kingdom

Originally Posted by: compvisions Go to Quoted Post
Where can I get the easiest/cheapest SSL? Can I add it to a existing installation with 100+ unattended clients already deployed? Can you give me step by step instructions? Thank you for your help

Try ssl discount coupons to get cheap price for SSL certificate. I recently saw a platform http://www.cheapsslcouponcode.com where many SSL providers offer their highest discount coupon codes. I hope this will help you to find different SSL providers at one place. This kind of providers also have their live chat support to solve customer's query like you have, so I think they will give you perfect reply to your question.
#6 Posted : Monday, June 5, 2017 6:20:25 AM(UTC)

Rank: Guest

Joined: 6/3/2017(UTC)
Posts: 1
Location: Austin

Thanks for providing helpful details here. I appreciate it.

Thanks again
Dawn Wells
Users browsing this topic
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.