# Certificates

QA Inspector creates a self-signed certificate during installation or update. This certificate encrypts connections. You can replace it with a certificate you provide.

On the Certificates page, you can perform the following actions:

- Generate CA CSR

- Upload signed CA certificate

- Upload trusted certificates

- Generate server certificates

- Export server certificate

- Show certificate information

## Generate CA CSR

To generate a Certificate Signing Request (CSR), send it to a Certificate Authority to obtain a digital identity certificate:

1. Insert the USB storage device into the device’s USB port.

2. Tap Generate CA CSR.

   - If the USB storage device is not connected, the system displays the message “External device not found.”

3. At the end of the process, the system displays the message “Generation successfully completed."

   Tap OK to continue

   - The system saves the file request.csr in the root folder of the USB drive.

## Upload signed CA certificate

To upload a signed CA certificate, follow these steps.

1. Insert the USB storage device into the device’s USB port.

2. Tap Upload signed CA certificate.

   - If the USB storage device is not connected, the system displays the message “External device not found.”

   - If the USB storage device does not contain a certificates folder, the system displays the message “Certificate folder not found.

3. Select the file you want to import from the list.

   - If you select an invalid file, the system displays the message “Invalid certificate.”

4. The system displays a pop-up with the certificate information. Tap OK to continue.

5. The system displays the message “Certificate import succeeded” at the end of the process. Tap OK to continue.

## Upload trusted certificates

To upload trusted CA certificates, follow these steps.

1. Insert the USB storage device into the device’s USB port.

2. Tap Upload trusted CA certificates.

   - If the USB storage device is not connected, the system displays the message “External device not found.”

   - If the USB storage device does not contain a certificates folder, the system displays the message “Certificate folder not found.

3. Select the file you want to import from the list.

   - If you select an invalid file, the system displays the message “Invalid certificate.”

4. The system displays a pop-up with the certificate information. Tap OK to continue.

5. At the end of the process, the system displays the message “Certificate authorities import succeeded.” Tap OK to continue.

## Generate server certificate

To generate a self-signed server certificate, follow these steps.

1. Tap Generate server certificate

2. The system displays a confirmation message. Tap OK to continue or Cancel to stop the operation.

## Export server certificate

To export the current server certificate, follow these steps.

1. Insert the USB storage device into the device’s USB port.

2. Tap Export server certificate.

   - If the USB storage device is not connected, the system displays the message “External device not found.”

   - If a file named certificate.pem already exists on the USB storage device, the system displays the message “The file already exists.” Tap OK to continue or Cancel to stop the operation.

3. At the end of the process, the system displays the message “Generation successfully completed.” Tap OK to continue.

   - The system saves the file certificate.pem in the root directory of the USB storage device.

## Certificate information

To view information about the current server certificate, follow these steps.

1. Tap  Show in server certificate.

2. The system displays a pop-up with the certificate information.

3. Tap  OK  to close the pop-up.

## Applies to: