Modules

Download and activate the module your task requires.

What you need

An administrator login for the appliance.
A licence that includes the module. FairSSL enables add-ons on the licence.

Activate the module

Open Appliance › Licence and status › Modules.
Click Download licensed modules and updates. The appliance downloads the modules and checks their signatures. A downloaded module is switched off.
Click Enable on the module. The module now shows Activation pending.
Click Restart and apply. The appliance restarts the application, not the virtual machine, and loads the module. The web interface is gone for a moment.

Check that it works

After the restart, the module shows Active under Appliance › Licence and status › Modules.

If it fails

Not in licence → contact FairSSL for the add-on or licence the module requires.
Activation pending → click Restart and apply.
Upload rejected → use a signed ZIP file no larger than 50 MB. Files with an invalid signature or damaged contents are not imported.

Module maintenance

Switch a module off with Disable, then Restart and apply.
If the Modules switch is on under Appliance › Maintenance › Updates, the appliance downloads module updates every night at 03:30. A download never switches a module on. See Keep sslbrain up to date.

Windows CA

The Windows CA (AD CS) module lets the appliance order certificates from your own Microsoft CA through a service agent on a Windows server in the domain.

It requires:

the Enterprise licence;
the Windows CA add-on on the licence. Contact FairSSL to get it;
an approved service agent on a Windows server that can reach the CA.

Add Windows CA from Certificates › Sources. If the module is missing, an administrator can choose Enable module and restart and continue setup after the restart. Choose Internal names under Used for.

The full setup, with permissions on the template and a check of the first certificate: Internal certificates from Windows CA.

MitID certificates

The MitID Erhverv module requires Enterprise and its licence add-on. On MitID Erhverv certificates, upload an OCES system certificate (.p12 or .pfx) with IdM and certificate administration rights and click Test connection. Use Request certificate for VOCES, FOCES or MOCES. The request shows Issued when the certificate is ready and can be exported as a password-protected PFX file.

Service windows

A service window determines when sslbrain may install certificates. Named service windows require Professional or Enterprise.

Open Appliance › Maintenance › Service windows.
Click New service window.
Give the window a Name.
Choose Time zone.
Enter the days and start and end times under Lines. A weekly range could be Wednesday 22:00 to 04:00.
Click Save.
Choose the window under Default window for the appliance.
Click Save to apply the default window.

Installation plans and servers without their own window follow the default. Choose Always to remove the time restriction when Require service window is off. An installation plan can choose its own Service window under Advanced in the installation plan wizard.

A range ending before it starts crosses midnight and belongs to the day it opens. Wednesday 22:00 to 04:00 covers 23:00 on Wednesday and 02:00 on Thursday, but not 23:00 on Thursday. Except for urgent installations allowed below, installation waits outside the window; certificate ordering, renewal and notifications do not. The service-window module does not need to be enabled to use windows. A downgrade to Basic or Free removes named windows and falls back to the daily time range.

Allow installation outside the service window when urgent is on by default. It allows installation for revoked or expired certificates even when the window is closed. If switched off, installation waits for the window and sslbrain raises an alarm.