Domain & TLS Certificate ConfigurationCopy Anchor Link

The MCM Platform supports configuring custom domain names (FQDN) and securing network ingress with valid SSL/TLS certificates. Administrators can manage Domain & TLS settings through the MSP Console UI or via CLI commands.

---

Method 1: UI-Based Domain & TLS Configuration (Recommended)Copy Anchor Link

MSP Administrators can configure domain and TLS certificate settings directly from the Web Console:

Steps to Update Domain & SSL Certificate:Copy Anchor Link

1. Navigate to Settings: Log in to the MCM Web Console as an MSP Administrator and go to Settings > Domain & TLS.
2. Enter Domain Name: In the Domain Name field, enter your target FQDN (e.g., mcm.yourdomain.com).

   Note: Ensure a DNS A record for this domain points to the server's public IP address before applying.

3. Select SSL Certificate Source:
   • Upload Custom Certificate: Select this option and upload your SSL Certificate file (.crt / .pem) and Private Key file (.key).
   • Let's Encrypt (Free): Select this option and enter your Notification Email Address for expiration alerts.
4. Apply Configuration: Click Apply Domain & SSL Configuration.
5. Confirm Update: In the confirmation modal, click Proceed with SSL Update.

   Warning: Expect ~3 to 5 minutes of temporary maintenance downtime while network gateway services reload.

6. Monitor Progress: Wait for the background process to complete (VALIDATING -> WRITING_CERTS / ISSUING_LETSENCRYPT -> RELOADING_GATEWAY -> COMPLETED).

---

Method 2: CLI-Based Configuration (Advanced / Automated Scripting)Copy Anchor Link

For automated server provisioning or headless environments, system administrators can configure domain and TLS certificates via the host server command line.

1. Configure Custom DomainCopy Anchor Link

1. Open /etc/mcm/user_config.env and update the DOMAIN variable:

   Copy Text

   sudo sed -i 's/DOMAIN=/DOMAIN=mcm.example.com/' /etc/mcm/user_config.env

2. Restart platform services:

   Copy Text

   sudo bash /opt/mcm/scripts/restart.sh

2. Replace Self-Signed Certificates with Custom CA-Signed CertificatesCopy Anchor Link

1. Copy your CA-signed certificate and private key to the system certificate directory:

   Copy Text

   sudo cp your_certificate.crt /etc/mcm/certs/server.crt
   sudo cp your_private_key.key /etc/mcm/certs/server.key

2. Disable automatic self-signed certificate generation in /etc/mcm/user_config.env:

   Copy Text

   sudo sed -i 's/GENERATE_SELF_SIGN_CERTS=true/GENERATE_SELF_SIGN_CERTS=false/' /etc/mcm/user_config.env

3. Restart the MCM platform to reload the gateway with the new certificate:

   Copy Text

   sudo bash /opt/mcm/scripts/restart.sh