This procedure allows a temporary bypass of the SSL certificate requirement but will not work for new versions of the Android Operating Systsem. It has been added in order to simplify the installation process for customer trial and evaluation implementations. However, it reduces the level of security in the solution as it does not authenticate the client-server connection and does not encrypt the transmission, and should not be used for long term deployment. Also note that this setting is not related to the Self-Signed SSL Certificate capability supported by the UCX.
In the case when a system administrator wishes to evaluate the InfinityOne mobile client user interface capabilities without going through the overhead of coordinating with the IT organization for the purchase, configuration, and installation of SSL certificate on the InfinityOne server, InfinityOne can be configured to not verify the SSL certificate credentials when a mobile client connects to the system.
Administrator
- Log into InfinityOne as an Administrator.
- Click on the settings icon
on the top right corner and select Administration.
- From the Administration navigation bar, select Chat General.
- Click the expand down icon
next to REST API.
- Toggle Allow Invalid Self Signed Certificates to ON.
- Click Save Changes.
Mobile User
As a reminder that the configuration is not secure and should not be used for long term applications, the InfinityOne mobile client users will receive a message on their screen when they initially log in to the server and during subsequent usage. This will be normal operation in this mode: