Configuring HTTPS

Zixi Broadcaster supports HTTPS encryption based on OpenSSL. Zixi Broadcaster expects certificate files in X.509 textual format (sometimes called ‘pem’) with a full chain of certificates, each one starts with “----BEGIN CERTIFICATE----", and the associated private key file, that starts with “----BEGIN PRIVATE KEY----". The certificate can be provided by an SSL/TLS certificate provider (Certification Authority) where the domain is registered, such as VeriSign, Digicert, etc.. Alternatively the certificate can be self-signed. A self-signed certificate is a certificate that is signed with its own private key. Self-signed certificates can be used to encrypt data just as well as CA-signed certificates, but your users will be displayed a warning that says that the certificate is not trusted by their computer or browser. Therefore, self-signed certificates should only be used if you do not need to prove your service’s identity to its users (e.g. non-production or non-public servers). 

Obtaining a CA-signed Certificate

Reach out to the hosting provider for instructions on how to obtain a CA-signed HTTPS certificate. As part of this process, you will be required to generate a certificate signing request (CSR). A CSR consists mainly of the public key of a key pair, and some additional information. Both of these components are inserted into the certificate when it is signed. To learn more about generating a CSR, go to - https://www.digitalocean.com/community/tutorials/openssl-essentials-working-with-ssl-certificates-private-keys-and-csrs

Obtaining a CA-signed Certificate

To Activate SNMP:

• Run the script file ./install_snmp.sh, located in the Broadcaster folder, where Zixi Broadcaster was installed. The events on the log screen are deleted.

Configuring SNMP Settings

 To Configure SNMP:

1. In Zixi Broadcaster UI, go to Settings > SNMP.
   
2. In the Service field, click the button to activate the service.  
3. Do one of the following:
   1. For SNMPv1 or SNMPv2, fill in the read-only and/or read-write community name in the Read only community name, and Read-write community name fields. 
   2. For SNMPv3, under the SNMPv3 Users section, click the + button. 
      The following screen appears:
      
      
      
      • In the User Name field, enter the SNMP user name.
      • In the Write Access field, select the checkbox to allow Read-Write access rights. If the checkbox is not selected, the user will have Read-only access rights.
      • In the Password field, enter the SNMP user's password.
4. Under the Trap Receivers section, specify SNMP Trap receivers that will listen to the SNMP Traps that will be sent by Zixi Broadcaster, by clicking the + button to add a trap receiver. 
   The following screen appears:
    
5. In the Community field, specify the community name for access.
6. In the Host field, specify the IP address to which the Trap messages will be transmitted.
7. In the Port field, specify the Port number to which the Trap messages will be sent transmitted.
8. Click Apply.

Viewing MIB Information

You can view the "Root MIB" (which defines the Zixi Broadcaster tree root definitions) and the "Broadcaster MIB" (which describes the Zixi Broadcaster MIB tree definition, including all its objects). 

To view MIB information:

1. In Zixi Broadcaster UI, go to Settings > SNMP.
2. At the upper right-hand corner click the Root MIB and/or Broadcaster MIB links.