How can an SSL certificate be acquired?
LearningSpace is a web application accessed by a web browser on the client's computers. To secure the data traveling between the LearningSpace system and the client's browser, the otherwise unsecured HTTP traffic must be encrypted using strong SSL certificates, resulting in HTTPS traffic.
To set up secure SSL access, you must acquire an SSL certificate.
The Intercom functionality of LearningSpace requires the web browser to access the client PC's microphone, which in turn requires a secure HTTPS connection to the LearningSpace server. The end-user institution is responsible for providing the SSL certificate.
Healthcare strongly recommends installing a valid SSL certificate for use in LearningSpace. Securely encrypted HTTPS traffic minimizes the risks inherent in applications connected to the Internet.
More on SSL Certificates >
SSL certificates establish a secure connection, creating a foundation of trust. To assure visitors that their connection is secure, browsers provide special visual cues that we call EV indicators: anything from a green padlock to a branded URL bar.
SSL certificates have a key pair: a public and a private key. These keys work together to establish an encrypted connection. The certificate also contains the “subject,” which is the identity of the certificate/website owner.
You must create a Certificate Signing Request (CSR) on your server to get a certificate. This process creates a private key and a public key on your server. The CSR data file you send to the SSL Certificate issuer (a Certificate Authority or CA) contains the public key. The CA uses the CSR data file to create a data structure to match your private key without compromising it. The CA never sees the private key.
Security tab without SSL certificate:

With an SSL certificate acquired:

A new certificate and key can be uploaded to the system in the following way:
Remove expired certificate (Remove button) - this will reset the status to factory default.
Select the new certificate and key (Browse button).
Click on the Upload button. Certificate data will be listed in the Certificate Information table.
⚠️ If you encounter any issues during upload, contact the Support team.
If the HTTPS certificate request/upload tool is enabled on your LearningSpace system, the page will look as below:

For a step-by-step guide, go to How to use the HTTPS certificate request/upload tool.
Process of acquiring an SSL certificate:
Generate a CSR (Certificate Signing Request), which requires the following data:
Country Name (full name) [e.g., United States of America]
State or Province Name (full name) [e.g., Some-State]
Locality Name (e.g., city) [Charleston]
Organization Name (e.g., company) [e.g., Internet Widgits Pty Ltd]
Organizational Unit Name (e.g., section) [College of Nursing]
Common Name (e.g., server FQDN) [e.g., somecollege.edu]
Email Address [university@edu.cc]NOTE: If the relevant authority does not allow you to generate a CSR using the above data, either the local IT department or the LearningSpace Support Team can do it.
IMPORTANT: When generating a CSR, a CSR file and a key are created. Treat the key with the utmost discretion: do not share it, even with the certificate signing authority.
With a CSR, you can purchase a valid, signed SSL certificate from a certificate authority.
You can select the certificate type and format on the signing authority's site during the signing process. LearningSpace requires the "standard" format: the BASE64-encoded X.509 (PEM) certificate.
Intermediate/ Chain certificate:
If the signing authority is not a root CA, then a so-called Intermediate or Chain certificate is also provided along with the SSL certificate. In such case, the Intermediate/ Chain certificate has to be copied into the signed certificate in the following way:
Open a text editor for the signed certificate and the intermediate certificate separately.
Copy the content of the intermediate certificate.
Paste the content of the intermediate certificate to the end of the signed certificate.
IMPORTANT: The signed certificate often does not end with a final line break. If you paste the intermediate certificate content without the final line break, it can cause a file-format error. Uploading such an erroneously formatted file (see example below) makes the web-server operation impossible and the LearningSpace system inaccessible!
Example of a properly created signed certificate file including an intermediate certificate >
-----BEGIN CERTIFICATE-----
MIIDqDCCApCgAwIBAgIJANWihKdBRAmRMA0GCSqGSIb3DQEBCwUAMGkxCzAJBgNV
BAYTAlVTMRMwEQYDVQQIDApTb21lLVN0YXRlMQ0wCwYDVQQHDARDaXR5MSEwHwYD
............ (full content of the signed certificate) ......
HVbLN9xKezHPBf28I2IEy+9RK1ftSyKezXzE51GXgJxH4TFbDt94QIfVJsiKAhPX
QT45QMTZTIBWX9avY0dAaodHxQVxmVFNckuDw+3Jwd9BrDKb0wNa9L4O2cZLGZt4
DDCmlbU1PfWShttPG9lW6g5qDe76AgiuTh0V1A==
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
SW50ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMRMwEQYDVQQDDApleGFtcGxlLmNhMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNhKYOOMWBVmVpZVc49WBfG6
mdAq8KYgYfJUMx6WgJBaZlCWdRjywvnCp7XxwId5QZv+coPdxBdWMl2QixT9gtKO
C+xnRjCJta63SNh1Wv4hOc53EuQujRJWTwitb1LgR4IZrRiiEHT4gyk06DpHEUMw
............ (full content of the intermediate certificate) ......
Ot80gu+xtYI+H9MF66JrTSjzXlPS8BVkpH61QU1k5nZ7cmz2EGpDUygZvF4S5f0E
zs8he2Xzr3EXUGSKN533SuCW7iTmCEPZhnRnmJ5MEbuiPvqhhQqATZpuv4lw/pW8
HVbLN9xKezHPBf28I2IEy+9RKDijRJWTwitb1L==
-----END CERTIFICATE-----
Example of an erroneously created signed certificate file including an intermediate certificate >
HVbLN9xKezHPBf28I2IEy+9RK1ftSyKezXzE51GXgJxH4TFbDt94QIfVJsiKAhPX
QT45QMTZTIBWX9avY0dAaodHxQVxmVFNckuDw+3Jwd9BrDKb0wNa9L4O2cZLGZt4
DDCmlbU1PfWShttPG9lW6g5qDe76AgiuTh0V1A==
-----END CERTIFICATE----------BEGIN CERTIFICATE-----
SW50ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMRMwEQYDVQQDDApleGFtcGxlLmNhMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNhKYOOMWBVmVpZVc49WBfG6
mdAq8KYgYfJUMx6WgJBaZlCWdRjywvnCp7XxwId5QZv+coPdxBdWMl2QixT9gtKO
Learn more on our System Manager pages.