diff --git a/_articles/extended-usage/dynamsoft-service-configuration.md b/_articles/extended-usage/dynamsoft-service-configuration.md index 9be16cee..8383b666 100644 --- a/_articles/extended-usage/dynamsoft-service-configuration.md +++ b/_articles/extended-usage/dynamsoft-service-configuration.md @@ -130,7 +130,7 @@ On the left of the page, you can check the service's status and update the [`Log On the right of the page, you can configure the service through the local access tab and the external access tab. -In the local access tab, you can update the SSL certificate for domains bound to `127.0.0.1`. +In the local access tab, you can update the SSL certificate for domains bound to `127.0.0.1` ([guide](/_articles/faq/change-dynamsoft-service-certificate.md)). In the external access tab, you can update the following settings: diff --git a/_articles/faq/change-dynamsoft-service-certificate.md b/_articles/faq/change-dynamsoft-service-certificate.md index 2d475997..9157c2c6 100644 --- a/_articles/faq/change-dynamsoft-service-certificate.md +++ b/_articles/faq/change-dynamsoft-service-certificate.md @@ -7,7 +7,7 @@ keywords: Dynamic Web TWAIN, Security, change certificate, service breadcrumbText: How can I change the certificate of the Dynamic Web TWAIN Service? description: How can I change the certificate of the Dynamic Web TWAIN Service? date: 2021-11-29 18:33:59 +0800 -last_modified: 2024-03-20 14:46:45 +0800 +last_modified: 2025-10-11 15:56:45 +0800 --- # Security @@ -16,31 +16,34 @@ last_modified: 2024-03-20 14:46:45 +0800 To replace the default certificate, the steps are: -
+- Generate a certificate for `127.0.0.1` with an RSA private key +- Rename the certificate to `server.pem` and the private key to `server_key.pem` +- Replace the old keys in the `cert` folder in the [service's installation folder](/_articles/extended-usage/dynamsoft-service-configuration.md#installation-folder) +- Restart the service -- [v19.0+](#19plus) -- [Versions below 19.0](#19min) +You can also pack the two files into a zip file and use the [configuration page](/_articles/extended-usage/dynamsoft-service-configuration.md#web-setup) to update. -
+## Appendix -- Generate a certificate for `127.0.0.1` -- Install that certificate -- Use that certificate to generate public /private keys (pem) -- Rename these two keys to `server.pem` (public) and `server_key.pem` (private) -- Replace the old keys in `C:\Program Files (x86)\Dynamsoft\Dynamic Web TWAIN Service {version number}\cert` -- Restart the service +### How to Generate the Certificate with acme.sh? -
+Run the following command to apply for an SSL certificate. -
+```bash +acme.sh --issue -d --keylength 2048 +``` -- Generate a certificate for `127.0.0.1` -- Install that certificate -- Use that certificate to generate public /private keys (pem) -- Rename these two keys to `server.pem` (public) and `server_key.pem` (private) -- Replace the old keys in `C:\Windows\SysWOW64\Dynamsoft\DynamsoftServicex64_{version number}\cert` -- Restart the service +Then, you can find the certificate named `fullchain.cer` and the private key named `your-domain.key` in the output folder. + +### What are the Files in the cert Folder -
+* default keys + * server.pem + * server_key.pem +* keys for [local.dynamsoft.com](/_articles/faq/failed-to-load-resource.md) (encrypted) + * server.pem.ldsc + * server_key.pem.ldsc +* keys for [Remote Scan](https://www.dynamsoft.com/remote-scan/docs/introduction/)'s proxy server after installation (encrypted) + * server.pem.ldwtc + * server_key.pem.ldwtc -
\ No newline at end of file diff --git a/_articles/faq/failed-to-load-resource.md b/_articles/faq/failed-to-load-resource.md index 76c019ca..357306e0 100644 --- a/_articles/faq/failed-to-load-resource.md +++ b/_articles/faq/failed-to-load-resource.md @@ -7,7 +7,7 @@ keywords: Dynamic Web TWAIN, Error Message, Failed to load resource, CERT INVALI breadcrumbText: Error Message - Failed to load resource description: Error Message - Failed to load resource date: 2021-12-01 17:04:03 +0800 -last_modified: 2023-11-28 15:48:24 +0800 +last_modified: 2025-10-11 15:23:24 +0800 --- # Error Troubleshooting @@ -16,14 +16,13 @@ last_modified: 2023-11-28 15:48:24 +0800 ### Symptom -You get an error message that says **"Failed to load resource: net::ERR_CERT_DATE_INVALID https://local.dynamsoft.com:18623/f/VersionInfo?ts=XXXXXXXXXXXX"**. And the browser keeps asking to install the Dynamic Web TWAIN Service (also called "Dynamsoft Service"). +You get an error message that says **"Failed to load resource: net::ERR_CERT_DATE_INVALID https://local.dynamsoft.com:18623/f/VersionInfo?ts=XXXXXXXXXXXX"**. And the browser keeps asking to install the Dynamic Web TWAIN Service (previously called "Dynamsoft Service"). ### Cause -By default, “127.0.0.1” is used for service connection. "127.0.0.1" uses a self-signed certificate because it is an internal IP address, if your environment requires high level security, self-signed certificates may not be accepted. Moreover, Android OS or Chrome OS does not accept connection between browsers and Dynamic Web TWAIN Service via "127.0.0.1". +By default, "127.0.0.1" is used for service connection. "127.0.0.1" uses a self-signed SSL certificate without an expiry date. It is installed to your system so that the browser can trust it. If your environment requires high level security, self-signed certificates may not be accepted. Moreover, it is not easy to install the self-signed certificate for systems like Chrome OS. - -In the case that you have used our expired certificate - local.dynamsoft.com, you will need to update to the latest VeriSign’ed certificate. The most recent expired "local.dynamsoft.com" certificate expired on 2024 November 19th, and the latest certificate will expire on 2025 November 20th. +In this case, we provide a domain, "local.dynamsoft.com", which points to "127.0.0.1". It has a VeriSign’ed certificate that has an expiry date. The most recent expired "local.dynamsoft.com" certificate expired on 2024 November 19th, and the latest certificate will expire on 2025 November 20th. > ___Please note:___ _all official certificates issued by 3rd party come with an expiry date - generally one year. This means that each year the certificate will need to be updated if local.dynamsoft.com is used._ @@ -38,15 +37,13 @@ In the case that you have used our expired certificate - local.dynamsoft.com, yo - **High Level Security Requirement (Please note: you need to replace the certificate annually due to expiration)** - 1. (**Recommended**) Revert back to the self-signed certificate for "127.0.0.1". Dynamsoft understands the importance of [information security](https://www.dynamsoft.com/Products/Dynamsoft_Security_Whitepaper.pdf) and are committed to remaining one of the most security-compliant companies in the industry. Starting from April 9,2021, Dynamsoft becomes ISO 27001 certified. Although a self-sign certificate is being used all connections are limited to the device itself (127.0.0.1) which ensures security in most cases. + If you have to use "local.dynamsoft.com", the following methods can be taken: + + - Method 1. Click here to download the new certificate and use the new server.pem.ldsc & server_key.pem.ldsc to replace the old one in the `cert` folder under the service's [installation folder](/_articles/extended-usage/dynamsoft-service-configuration.md#installation-folder). Then restart Dynamic Web TWAIN Service. - 2. If you have to use "local.dynamsoft.com", the following methods can be taken: - - Method 1 (**Recommended**). Take advantage of the new feature -- **Remote Scan** which released in v18.0. With Remote Scan, you can limit the number of Dynamic Web TWAIN Service Installations to a minimum. For more details, please refer to [What is Remote Scan](https://www.dynamsoft.com/remote-scan/docs/introduction/). - - - Method 2. If you must fix the issue on a few client machines immediately, manually update the following cert files on the client-side machine. Click here to download the new certificate and use the new server.pem.ldsc & server_key.pem.ldsc to replace the old one under **`C:\Windows\SysWOW64\Dynamsoft\DynamsoftService(DynamsoftServicex64_{version number})\cert`** (from v19.0+, the path is `C:\Program Files (x86)\Dynamsoft\Dynamic Web TWAIN Service {version number}\cert`). Then restart Dynamic Web TWAIN Service. - > Note: the new certificate from Dynamsoft will expire on December 8th, 2023. This means you must update the certificate again after this certificate expires. + - Method 2. [Contact Dynamsoft](/_articles/about/getsupport.md){:target="_blank"} for a new service installer for client-side. Please specify the exact service version build number found from the version your client currently has installed. - - Method 3. [Contact Dynamsoft](/_articles/about/getsupport.md){:target="_blank"} for a new MSI for client-side. Please specify the exact service version build number found from the version your client currently has installed. + - Method 3. You can also generate the certificate by yourself. Check out this [post](/_articles/faq/change-dynamsoft-service-certificate.md).