Karmak - SSL Certificate Decisiv Endpoint Security

Please make sure that the PKCS12 certificate format is used for the certificate. Almost all the certificate providers support this format hence it should not be an issue. Decisiv will be supporting PKCS12 container uploading on the application admin page.

Endpoint Configuration

1. Name – it can be anything you want it to be and does not really affect any functionality and only for convenience
2. URL – this is the end point of the interface; same as what is being used today without SSL certificate
3. Content Type – currently, for AWS migration, we will use application/xml since all our interfaces use the same
4. SSL verify mode – whether to verify the SSL certificate or not. If self signed certificates are being uploaded, then the application will not try to verify them. For our purposes, since digicert or some other certificate authority is being used, we will select verify_peer
5. Client certificate – the PKCS12 file to be uploaded and corresponding password

In order to upload SSL client certificate for your location you will need to log into the location at the URLs below:

Staging:                https://dsmp.staging.decisivapps.com

Production:        https://dsmp.decisiv.net

Note: If you need login credentials, please reach out to Decisiv Support at support@decisiv.com and let them know which rooftops you will need access to. 

• Then go to Admin->Customize Your Database->Location Information
• The page has three tabs: Details, External Interfaces, and Features
• Click on External Interfaces and you will see details of the current interface configurations
• Next to each endpoint, you will see Manage Endpoints link
• Clicking on the link will take you to Endpoint editing and creation screen
  
  

• Click [edit]
  • At the bottom of that screen is the link for uploading the SSL certificate
• Upload the certificate file and set the corresponding password
  
  
• You will need to load the client side certificate on Decisiv for each of the locations and for each of the interfaces enabled for those locations
• You will load the server side SSL certificate on your system where the interface is running
• How many certificates are used on DMS side is your decision
  • You may decide to use exactly one certificate for all branches and all interfaces on a given DMS system
• On Decisiv side the configuration needs to be done for each branch for each interface/endpoint

Let us know if you need our assistance with getting these certificates in place and/or if you'd like to complete any testing once the certificates are in place.