TLS Certificates

---

1. Get a TLS certificate in PEM format for each server. This certificate has to contain the following entries:

   • localhost

     • For local connections on a server.

   • SEAL Print Client server name

     • For connections to Consul and MongoDB

   • Consul-specific server name

     • For connections between the SEAL Print Client services

   Hint - TLS certificates

   All TLS certificates have to be signed by the same Certificate Authority (CA).

2. Replace the following file by the private key:

   • C:\ProgramData\SEAL Systems\infrastructure\config\tls\key.pem

3. Replace the following file by the signed public certificate:

   • C:\ProgramData\SEAL Systems\infrastructure\config\tls\cert.pem

4. Save the CA's certificate in the following file:

   • C:\ProgramData\SEAL Systems\infrastructure\config\tls\ca.pem

---