Epicor Idea: Fix Self-Signed Certs

[Mark_Wonsil]

Here’s the solution to our EKW case (CS0004093332).

• Revert to less secure version of Chrome
• Get a Trusted Cert

I created an Epicor Idea to fix self-signed certs at least for dev instances, but the writing is on the wall.

A few related threads:

Self signed SSL cert being blocked by Chrome

Cert created with powershell works, cert created in IIS - does not THis is where it is created [image] and the error is mentioned here: ERR_SSL_KEY_USAGE_INCOMPATIBLE It is different from the error you have until install in trusted storage.

EKW Scanners Inaccesible URL

Hello, Randomly thursday last week a lot of our scanners started coming up with the read error saying inaccesible URL these scanners are fully licensed nothing has changed on the server we now have 7 scanners we cant use as they cant connect to the server.

Manual Picking Process

Hi All, We have a problem with our warehouse guns which is being looked into but in the mean time we are looking for a manual process, is there any way to pick orders without the EMW system?

EpicorRESTApiCore - Error when running POST

I just switched over to using @josecgomez 's new package for .NET 6, and I’m getting the attached errors when trying to instantiate a new EpicorRestSession. Code is below: using (EpicorRestSession ses = new EpicorRestSession()) { EpicorRest.AppPoolHost = "https://usaz1app008p.am.dir.grpleg.com"; EpicorRest.AppPoolInstance = "EpicorERPPilot"; EpicorRest.UserName = Properties.Settings.Default.BatchEntryPerson; …

[Olga (Olga Klimova)]

Cert created in the last versions of EAC still works for me.
That is why I asked to report if it does not.

But of course if your Kinetic version is several years old, I don’t think this will be fixed. You can create a cert with powershell just as well.

[Mark_Wonsil]

I suggested that Epicor create a certificate service like CertifyTheWeb.com to make this process easier for Kinetic users and to get out of the self-signed cert business. Here’s Support’s response:

That is why I created the Epicor Idea.

[Mark_Wonsil]

Support also reminded me of this from the Kinetic Installation Guides (even my old one! )

"With HTTPS as the standard protocol, all servers now require certificates. We recommend that you obtain certificates from a certificate authority. You may be able to get a free certificate from the nonprofit Let’s Encrypt (https://letsencrypt.org/) authority. While we recommend a certificate from a certificate authority, for intranet scenarios you may decide that a self-signed certificate is appropriate for servers not exposed to the public Web.

Important - We do NOT recommend using self-signed certificates for Kinetic Servers that host the production database as they do not assure high security. Please, study the available options and obtain an SSL certificate for your server from a trusted Certificate Authority."

[Olga (Olga Klimova)]

I wanted to create a cert authority as a part of IDP stuff long ago