GeCert on-premises
GeCert can be used on an instance hosted by Lacuna or you can host your own instance.
Supported platforms
GeCert is an ASP.NET Core (.NET 6) application, distributed as an installation package or as a Docker image, compatible with:
- Windows Server
- Linux
- Docker
note
The setup instructions are currently under construction. If you need instructions that are not yet available, please contact us.
Prerequisites
- A SQL Server database, given in the
ConnectionStrings:DefaultConnectionconnection string. The database model is created and updated by the application itself. - A GrantID subscription, in the cloud or on-premises, for user authentication. See Configure OpenID Connect.
- A PKI SDK license, in Base64, in the
PkiSuite:SdkLicensesetting. - A key store besides the database, if you are going to keep the keys in an HSM, in Azure Key Vault or in a PKCS #11 device. See Configure key stores.
- For the users, Gecert Connect installed on Windows, pointing to the instance. See Configure Gecert Connect on the server.
Configuration
The configuration lives in the application's appsettings.json file, in an .ini or .conf file or in environment variables, as in the
other Lacuna products: the Oidc section corresponds to the Oidc__Authority variable, and so on.
| Section | What it configures |
|---|---|
ConnectionStrings:DefaultConnection | The SQL Server connection string |
General | SiteUrl, the public address of the instance; SiteName, the name shown on the sign-in screen (default: Gecert); EncryptionKey, the key that protects the sensitive data the application stores |
Oidc | The GrantID integration. See Configure OpenID Connect |
KeyStores | The key stores. See Configure key stores |
GecertConnect | What Gecert Connect reads from the server. See Configure Gecert Connect on the server |
PkiSuite:SdkLicense | The PKI SDK license, in Base64 |
BlobStorage | Where the application keeps the uploaded files (the PKCS #12 files and certificates, deleted after import) and the keys' CSRs: Type FileSystem with Path, or a cloud storage with ConnectionString and ContainerName, as in Amplia |
Email | The SMTP server used for user invitations: ServerHost, SenderAddress, SenderName, Username and Password, as in Amplia |
Serilog | The application logs |