Facilities IT

Setting up the Windows App Client (DesigoCC Click Once)

The following procedure provides the steps for launching the Windows App client for the very first time by installing the website certificates. The steps may vary; for example, the Certificate Error: Navigation Blocked page may not display, if the website/web application certificate is already installed.

1. You have reviewed the tips before launching the website or web application URL.
2. In the SMC tree, select the website or web application.
   NOTE: Clicking the website/web application URL in the SMC results in opening the Desigo CC web page in your default browser. It is recommended to launch the Windows App client using Windows browser Internet Explorer 11 onwards.
3. Click Copy URL to copy the HTTPs URL of a website/web application.
4. Launch the Windows Internet Explorer browser (Internet Explorer 11 onwards).
5. In the address bar, paste the copied URL.

• The Certificate Error: Navigation Blocked page displays. This error occurs if the self-signed or host certificate is not already available in the Windows Certificate stores. Usually this error does not occur for the commercial certificates.

1. Install the website certificate.
2. Close the IE 11 browser.
3. Re-launch the web application HTTPs URL.

• The error message Certificate Error:Navigation Blocked disappears and the Desigo CC web page with thumbnails for Windows App client displays.

1. Install the web application certificate for verifying the signature when downloading the application in the appropriate Windows certificate store.
2. From the Desigo CC web page, depending on the client type, click the Windows App Client thumbnail and follow the installation wizard prompts that display (in the section on Starting and Exiting the System, see Launch a Windows App Client). 

• You have created a website or web application using SMC and the URLs (HTTPs) are available.
• You have not installed the certificate used in the website.

1. Browse the website or web application HTTPs URL in the Windows Internet Explorer 11 browser.

• The Certificate Error: Navigation Blocked page displays due to an untrusted certificate.

1. Click Continue to this website (not recommended).

• In the Desigo CC web page address bar, a Certificate Error security report displays.

1. Click Certificate Error to open a menu that contains a View certificates hyperlink.

1. Click View Certificates.
2. In the Certificate dialog box that displays, click Install Certificate.
   NOTE: The same website/web application certificate (host/self-signed) that was provided during website/web application creation, displays and you can proceed with installing it in the TRCA store. However, in order for the host certificate to work with Windows App client, you must import the root of the host certificate that you used while creating website in the TRCA store.

1. Depending on the type of certificate used, proceed with importing the certificate as follows:

• If the certificate you used while creating a website is a self-signed certificate, then you must install it in the Trusted Root Certification Authorities store.
• If the certificate you used while creating a website is a host certificate, then you must install the root certificate of the host in the Trusted Root Certification Authorities store.

NOTE:
If the Certificate Error: Navigation Blocked page displays, even after installing the website certificate, then verify that the Subject Alternative Name (SAN) property for the selected certificate contains the host name specified while creating the website.
For example, if the website Host name field contains the full computer name, ABCXY022PC.dom01.company.net, then the certificate provided in the Certificate issued to field must contain the full computer name ABCXY022PC.dom01.company.net as one of its names in the SAN property.

The certificate you select while creating the web application is the same certificate that you must install in the certificate store under Current User > Trusted Root Certification Authority and Current User > Trusted Publisher certificate before launching the Windows App client. You can do this using the following procedure.

• You have created a web application using SMC and the HTTPs URLs display.
• The Desigo CC web page is open in the Windows Internet Explorer browser, and the Desigo CC tab contents are displayed.

1. Do one of the following:

• In the Desigo CC web page, click the Click Here link on the Desigo CC page for a web application.
• In the Desigo CC web page, click the Support tab, and then select the Web Application Certificate link.

1. In the File download – Security Warning dialog box, click Open.

1. In the Certificate dialog box, click Install Certificate.

1. Depending on the type of certificate used, proceed with importing the certificate by doing one of the following:

• If you used a self-signed certificate while creating a web application, then you must install it in the Trusted Root Certification Authorities and Trusted Publisher Windows Certificate store (See Install Certificates in the Trusted Root Certification Authorities (TRCA) Store and Install Certificates in the Trusted Publisher (TP) Store in Web Application Procedures).
• If you used a host certificate while creating a Web Application, then you must install it in the Trusted Publisher Windows Certificate store. You must also install the root certificate of the host in the Trusted Root Certification Authorities store (See Install Certificates in the Trusted Root Certification Authorities (TRCA) Store and Install Certificates in the Trusted Publisher (TP) Store in Web Application Procedures).
  NOTE: If host certificates created with SMC are used for signing the Web Application and the Internet browser is configured to check the publisher's certificate revocation, the Security Warning message may display, even after installing the certificate. In this case, you can either add the website to the Trusted Sites zone to resolve the issue or ignore the warning and click Install (for Windows App client).