CAE LearningSpace is a web application that is accessed by a web browser on the client's computers. To secure the data traveling between the CAE LearningSpace system and the client's browser, the otherwise unsecured HTTP traffic needs to be encrypted using strong SSL certificates, resulting in HTTPS traffic.
CAE Healthcare strongly recommends installing a valid SSL certificate for use in CAE LearningSpace. The securely encrypted HTTPS traffic will minimize the risks that are inherent to applications connected to the Internet.
See How can an SSL certificate be acquired?
In specific, the Intercom functionality of CAE LearningSpace requires the web browser to have access to the microphone of the client PC, which in turn requires a secure HTTPS connection to the CAE LearningSpace server.
It is the responsibility of the end-user institution to provide the SSL certificate.
The HTTPS certificate reques tool is a hideable tool - please turn to your System Administrator to have it enabled on your system.
If not enabled, the "legacy" version of 'SSL/HTTPS SECURE ACCESS SETUP' will be available on the System manager's Security tab (see image below). For more information read How can an SSL certificate be acquired.
Process of requesting/uploading a certificate
Navigate to System module, Security tab - SSL/HTTPS SECURE ACCESS SETUP.
Available to Admin users only.
Two options will be available here: the Request Certificate and the Upload Certificate options.
As the first step of the HTTPS configurational process select from the following two scenarios:
- You do not have a certificate or a key → proceed to Request Certificate
- You have your own SSL certificate and a private key → proceed to Upload Certificate
Request Certificate
By selecting the Request Certificate option, five steps will follow, to request a certificate. The main components are:
- Brief - information about these steps
- Data Input - empty fields to fill in with the necessary data (Country Name, State or Province Name, Locality Name, Organization Name, Organization Unit Name, Common Name, Email Address)
- Download Certificate - a generated certificate that includes the above data
Upload Signed Certificate - a certificate signed by a Certificate Authority can be uploaded via this option. Optionally, intermediate certs can be uploaded and host name can be validated here as well.
- Activation - data can be verified once again before activating the certificate
Brief
This component describes what will happen in the next steps.
Data Input
As the second step, the fields need to be filled in with the necessary pieces of information.
- The first field is a dropdown menu populated with country names.
- The next five fields need to be filled in accordingly (minimum character limit is 1, no character maximum limit).
- The last field (Email Address) must be filled correctly, with any of the following formats: test@mail or test@mail.com.
Information tips will help you fill in these fields, by hovering over the 
icon.
If not all the fields are filled in or if one field is incomplete, the Next button stays inactive.
Once all data is added correctly, green checkmarks show the completion and the Next button becomes active.
Download Certificate
The certificate can be downloaded here, which is filled in with the previously entered data.
Once the Download button has been hit at least once, the Next button will become active.
Hit the Next button to proceed to the Upload Signed Certificate step.
Validating Certificate by a Certificate Authority
The downloaded Certificate Signing Request (CSR) needs to be submitted to a Certificate Authority (CA) to be signed. Once validated and signed, you can proceed with uploading the Signed Certificate into your CAE LearningSpace system.
Upload Signed Certificate
Through this step, the *.crt file downloaded through the previous step (or *.cer/*.pem files) signed by a Certificate Authority can be uploaded.
*p7b, *p12, *.der format files are not supported in CAE LearningSpace.
Self-signed certificates are currently not supported in CAE LearningSpace. The below notification message warns you about this. Read more about Self-signed certificates further below*.
Press the Upload button and select the certificate file to be uploaded.
Hover over the icon to get more information immediately.
The validation starts automatically: 'Validating' and a loading circle will be visible.
Once the validation is finished, the two outputs can be 'validated' or 'invalid'.
- Invalid cert returns with the script 'Invalid' and a red cross
. - The valid cert returns with the script 'Validated' and a green checkmark
.
In case of an Invalid certification upload, the certificate should be deleted by using the dustbin icon 
. If validation fails repeatedly, the whole process should be terminated and restarted.
Anytime a request process is restarted, the newly generated certificate needs to be signed by the CA - the one from the terminated process cannot be reused.
If the certificate is a wildcard, you can test the host name. (You still need to complete the chain after the test.)
If the certificate not wildcard, you cannot test host name. (You still need a complete chain.)
In special cases intermediate certificate(s) can be uploaded as well (maximum limit is 5).
Multiple intermediate certificates can be uploaded (and deleted if necessary) individually, but according to their correct sequence.
Invalid intermediate certificates can be deleted by using the red dustbin iconand then, a new intermediate certificate can be uploaded.
Activation
All previously uploaded files are collected on the activation component and summarized on this component.
Here you can activate your certificate by pressing the Activate button.
Pressing the Activation button activates the cert. A confirmation window will pop up with two options:
- If you press the Activate button, the validation/activation process will be started:
- By pressing the Cancel button, you cancel the process.
Once the cert has successfully been activated, a completed component will appear, stating that you have successfully validated and activated your certificate.
If certification validation and activation fails, restart the process or contact the Support team.
The Save and Close button closes the confirmation window.
Upload Certificate
The second option under 'SSL/HTTPS SECURE ACCESS SETUP' is the Upload Certificate button, where an already existing certificate can be uploaded in 3 steps.
- Upload Signed Certificate (same procedure as the Request Certificate upload step)
- Upload Key - Key can be uploaded and matched
- Activation (same procedure as the Request Certificate activation step but has an extra check which is the uploaded key)
Self-signed certificates are currently not supported in CAE LearningSpace. The below notification message warns you in case you would try to upload this type of certificate. Read more about Self-signed certificates further below*.
Upload Signed Certificate
As the first step here, press the Upload button and select the certificate file to be uploaded:
Hover over the icon to get more information.
A validation process will start along with the upload:
Once certificate has been validated, enter Host Name and hit the Validate button:
In case of an Invalid certification upload, the certificate can be deleted by using the dustbin icon . If validation fails repeatedly, the whole process should be terminated and restarted.
Validating certificate’s host name:
Uploaded certificate’s host name is valid:
Upload Key
The option to upload the key for your certificate, which must correspond to certain things:
- The file extension can be .key or .pem
- The file size cannot be larger than 1MB
The upload button gets inactive after the file upload is successful.
In the background, meanwhile, a validation process ('Matching') is taking place.
If the uploaded key is correct, it will be displayed as 'Matched'.
In case of an Unmatched key upload, the key can be deleted by using the dustbin icon . If matching fails repeatedly, the whole process should be terminated and restarted.
Activation
This component looks the same as when Requesting a certificate, the only difference is that it has an extra section for uploading the key.
In case of failed activation, the following error message is displayed:
If certification validation and activation fails, restart the process or contact the Support team.
Once the cert has successfully been activated, the following message appears in the pop-up:
The process has successfully been completed. Press the Save and Close button.
Additional Components
Status Table
The table under 'SSL/HTTPS SECURE ACCESS SETUP': Certificate Information, contains all data of the certificate.
Continue / Terminate Process Button
The above described process can be terminated at any point of the process, with the Terminate Process button (after having closed the pop-up with Save and Close).
When interrupted or paused, the process can be continued with the Continue Process button.
Confirm termination:
After HTTPS is properly configured for your CAE LearningSpace system, the above multi-step wizard process can be re-initiated at anytime (e.g. when the certificate expires).
Restarting the process does not affect the already existing HTTPS config and does not disrupt day-to-day work in CAE LearningSpace.
If you see the below message displayed you cannot upload or request a certificate, since you have several servers connected to your CAE LearningSpace system. Please turn to your System Administrator or to the Support team.
About Self-signed certificates*
When using self-signed certificates on client computers, the clients will not trust the certificate by default as it is not issued by a trusted Certificate Authority (CA). Therefore, clients will typically see security warnings or errors when accessing a website or service that uses a self-signed certificate.
To avoid these warnings and errors, clients can manually trust the self-signed certificate by importing it into their trusted root certificate store. This process varies depending on the operating system and browser being used.
It is important to note that while self-signed certificates can provide encryption for network traffic, they do not provide the same level of assurance as certificates issued by trusted CAs. Self-signed certificates can be easily created by anyone and do not go through the rigorous validation processes that trusted CA certificates go through.
Learn more on our System Module pages.
Overview
Content Tools