Skip to content
Docs sslbrain sslbrain.com

Modules

Copy link to the page “Modules”

A module is a signed add-on to the appliance that your licence gives access to. The Modules page is for administrators only.

How modules work

Copy link to the section “How modules work”

sslbrain Cloud offers the modules the licence tier gives. An add-on, for example Windows CA, is offered once FairSSL has switched it on for the licence.

  1. Open Modules.

  2. Click Download licensed modules and updates. The appliance downloads the modules and checks their signatures. A downloaded module is switched off.

  3. Click Aktiver on the module. The button is in Danish in the English interface too. The module now shows Activation pending.

  4. Click Restart and apply. The appliance restarts the application, not the virtual machine, and loads the module. The web interface is gone for a moment.

  • Switch a module off with Deaktiver, then Restart and apply.
  • Upload modul takes a signed ZIP file of at most 50 MB. A module with an invalid signature or damaged files is not imported.
  • A module the licence does not cover shows Ikke i licens and cannot be switched on.
  • If the Modules switch is on under Updates › Automation, the appliance downloads module updates every night at 03:30. A download never switches a module on. See Keep sslbrain up to date.

Windows CA

Copy link to the section “Windows CA”

The Windows CA (AD CS) module lets the appliance order certificates from your own Microsoft CA through a service agent on a Windows server in the domain.

It requires:

  • the Enterprise licence;
  • the Windows CA add-on on the licence. Contact FairSSL to get it;
  • an approved service agent on a Windows server that can reach the CA.

Download, switch on and load the module as above. Then add the CA as a source under Sources › Sources with the type Windows CA. If the module is not loaded, the page says, in Danish: “Windows CA-modulet er ikke indlæst på denne appliance. Aktivér det under Moduler og genstart.”

The full setup, with permissions on the template and a check of the first certificate: Internal certificates from Windows CA.

Maintenance windows

Copy link to the section “Maintenance windows”

A maintenance window is the days and times when sslbrain may install certificates on the servers. Without a window, certificates are installed at any time. Windows require Professional or Enterprise.

  1. Open System › Appliance and licence › Overview.

  2. Choose the days, and enter the start and end in the Maintenance window card.

  3. Save.

The window applies to every rule that has no window of its own. A rule can get its own window in the Maintenance window field of the rule wizard. It then ignores the appliance’s window. See First certificate on a server.

  • A window that ends before it starts runs past midnight and belongs to the day it opens. “Wednesday 22:00 to 04:00” covers 23:00 on Wednesday and 02:00 on Thursday, but not 23:00 on Thursday.
  • Outside the window, the rule waits until the window opens. The certificate shows “waiting for window” next to the rule. Alerts are sent regardless of the window.
  • Remove window removes it again and needs no licence. A saved window still applies after the licence is downgraded, until you remove it.
  • The Maintenance windows module in the list of modules is not needed. The licence decides whether a window can be saved.