Skip to content

Commit d658ca2

Browse files
Merge pull request #1090 from ryanrichter94/QSG2
2 parents b160156 + 375f7d4 commit d658ca2

File tree

1 file changed

+5
-7
lines changed

1 file changed

+5
-7
lines changed

src/content/docs/en-us/c4b-environments/quick-start-environment/chocolatey-for-business-quick-start-guide.mdx

Lines changed: 5 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -209,29 +209,25 @@ export const callout4 = {
209209

210210
```powershell
211211
Set-Location "$env:SystemDrive\choco-setup\files"
212-
.\Set-SslSecurity.ps1 -Thumbprint '<YOUR_CUSTOM_SSL_CERT_THUMBPRINT_HERE>' -Hardened
212+
.\Set-SslSecurity.ps1 -Thumbprint '<YOUR_CUSTOM_SSL_CERT_THUMBPRINT_HERE>'
213213
```
214214

215215
<Callout type="warning">
216216
If you are using your own SSL certificate, be sure to place this certificate in the `Local Machine > Personal` certificate store before running the above script, and ensure that the private key is exportable.
217217
</Callout>
218218

219-
<Callout type="info">
220-
You may have noticed the `-Hardened` parameter we've added above. When using a custom SSL certificate, this parameter will further secure access to your C4B Server. A Role and User credential will be configured to limit access to your Nexus repositories. As well, CCM Client and Service Salts are configured to further encrypt your connection between CCM and your endpoint clients. These additional settings are also incorporated into your `Register-C4bEndpoint.ps1` script for onboarding endpoints. We do require you to enable this option if your C4B Server will be Internet-facing, with a FQDN that resolves to a public IP.
221-
</Callout>
222-
223219
**ALTERNATIVE 2 : Wildcard SSL Certificate** - If you have a wildcard certificate, you will also need to provide a DNS name you wish to use for that certificate:
224220

225221
```powershell
226222
Set-Location "$env:SystemDrive\choco-setup\files"
227-
.\Set-SslSecurity.ps1 -Thumbprint '<YOUR_CUSTOM_SSL_CERT_THUMBPRINT_HERE>' -CertificateDnsName '<YOUR_DESIRED_FQDN_HERE>' -Hardened
223+
.\Set-SslSecurity.ps1 -Thumbprint '<YOUR_CUSTOM_SSL_CERT_THUMBPRINT_HERE>' -CertificateDnsName '<YOUR_DESIRED_FQDN_HERE>'
228224
```
229225

230226
For example, with a wildcard certificate with a thumbprint of `deee9b2fabb24bdaae71d82286e08de1` you wish to use `chocolatey.foo.org`, the following would be required:
231227

232228
```powershell
233229
Set-Location "$env:SystemDrive\choco-setup\files"
234-
.\Set-SslSecurity.ps1 -Thumbprint deee9b2fabb24bdaae71d82286e08de1 -CertificateDnsName chocolatey.foo.org -Hardened
230+
.\Set-SslSecurity.ps1 -Thumbprint deee9b2fabb24bdaae71d82286e08de1 -CertificateDnsName chocolatey.foo.org
235231
```
236232

237233
<br />
@@ -240,6 +236,8 @@ export const callout4 = {
240236
> <summary><strong>What does this script do? (click to expand)</strong></summary>
241237
> <ul class="list-style-type-disc">
242238
> <li>Adds SSL certificate configuration for Nexus and CCM web portals</li>
239+
> <li>A Role and User credential are configured to limit access to your Nexus repositories</li>
240+
> <li>CCM Client and Service Salts are configured to further encrypt the connection between CCM and your endpoint clients</li>
243241
> <li>Generates a `Register-C4bEndpoint.ps1` script for you to easily set up endpoint clients</li>
244242
> <li>Outputs data to a JSON file to pass between scripts</li>
245243
> <li>Writes a Readme.html file to the Public Desktop with account information for C4B services</li>

0 commit comments

Comments
 (0)