Section 8 of 14
Certificate and browser warning
Why the browser warns you on the first visit, how to check the fingerprint and how to install a certificate from your own certificate authority.
The panel runs over HTTPS, so the device needs a certificate. The key it rests on is created inside the device on first start and NEVER leaves it — only a signing request ever goes out.
Two sources of certificate
- Its own, self-signed
- The factory state. The browser warns, because nobody outside vouches for the device identity. You establish trust once: compare the fingerprint shown by the browser with the one in the device panel.
- Signed by your own authority
- For companies running their own PKI. You download the request from the panel, sign it with your authority and upload the finished chain back.
An uploaded certificate has to match the device key, which means it has to come from the device request. A certificate issued for a different key is refused with a clear message — without that, one copy-paste mistake would cut off the panel until a reset.