8. SSL Connections

From software version 2021.1 and later NexLog DX-Series recorders, there will be support for Screen Agent DX SSL connections. This will allow the user to configure an encrypted connection between the client and the recorder. You can follow the steps below to configure a Screen Agent DX SSL connection.

Prerequisite: If your recorder does not already have an SSL certificate, then you must make a request for one and apply it to the recorder. This is necessary for being able to configure the accepted SSL connection types. You can reference the SSL Certificate Request & Application section of the NexLog DX-Series Recorder User Manual on how to do this.

8.1. Configuring a Recorder for Screen Recording with SSL Connections

  1. Log in to the Configuration Manager of the recorder you will be screen recording on

  2. Go to Users and Security -> SSL, then go to the ‘Connection Settings’ tab

Here you will see a ‘Screen Agent DX connections’ field with a drop-down menu. It provides the following options:

  • SSL Only: This will only allow Screen Agent DX client connections that have been configured to use encrypted connections on the client side

  • Unencrypted Only: This will only allow Screen Agent DX client connections that have not been configured to use encrypted connections on the client side

  • Both: This will allow both encrypted and unencrypted connections

  1. Choose the connection type that best suits your requirements and click ‘Save’

  2. Reboot the recorder (There will be a message at the top of the page indicating a reboot is required for the configuration to take effect)

8.2. Download the Screen Agent DX installer

  1. Log in to the Configuration Manager of a NexLog DX recorder.

  2. Go to Utilities -> Downloads

  3. Click the ‘Download’ button for ‘Screen Capture Agent’

  4. Move the downloaded installer file to the target PC to be recorded

Note

Prior to step 3 below, make sure there is already a Screen Agent Interface on the recorder. If not, then you must create one. To check if there is one, log in to the Configuration Manager of the recorder where you will be recording screen channels, and go to Recording -> Recording Interfaces. If there is already a Screen Agent Interface, you will see it here.

8.3. Install and Configure Screen Agent DX

  1. Follow the typical installation steps for Screen Agent DX (as seen in section Section 3 Installing on a Workstation)

  2. Once the installation is completed, you will see the dialog below to configure Screen Agent DX. Click ‘Next’.

Screen Agent Configuration Wizard

Fig. 8.1 Screen Agent Configuration Wizard

  1. Click ‘Yes’ when you see the dialog below to open the Screen Agent DX Setup Wizard

User Account Control Dialog

Fig. 8.2 User Account Control Dialog

  1. Select ‘Claim New Recorder Channel’ at the dialog below and click ‘Next’

Eventide Screen Agent Configuration Options

Fig. 8.3 Eventide Screen Agent Configuration Options

  1. In the dialog below, you will see the option ‘Use Secure Connection’. If the recorder is configured for Screen Agent connections to be ‘SSL only’ or ‘Both’, then you can check this box. Provide all the other necessary information and click ‘Next’.

Eventide Screen Agent Configuration

Fig. 8.4 Eventide Screen Agent Configuration

  1. If there are available Screen Agent DX channels on the recorder and the configuration for ‘Use Secure Connection’ on the client side is compatible with the configuration on the recorder side, then the client should establish a successful connection with the recorder as seen below:

Eventide Screen Agent Claim Complete

Fig. 8.5 Eventide Screen Agent Claim Complete

8.4. Configuring SSL Through a Channel Reclaim

When reclaiming a channel through the Screen Agent DX Setup Wizard, you are also provided the option of establishing a secure connection. See the steps below:

  1. Open the Screen Agent DX configuration wizard. Select the ‘Reclaim Existing Recorder Channel’ option as seen below and then click ‘Next’

Eventide Screen Agent Reclaiming Channel

Fig. 8.6 Eventide Screen Agent Reclaiming Channel

  1. In the dialog below, you will notice the option called ‘Use Secure Connection’. If the recorder is configured for Screen Agent connections to be ‘SSL only’ or ‘Both’, then you can check this box. Provide all other necessary information and click ‘Next’.

Eventide Screen Agent Use Secure Connection Option

Fig. 8.7 Eventide Screen Agent Use Secure Connection Option

  1. If there are available Screen Agent DX channels on the recorder and the configuration for ‘Use Secure Connection’ on the client side is compatible with the configuration on the recorder side, then the client should establish a successful connection

8.5. Configuring SSL from a screen channel page on the recorder

You can change the SSL connection type of a specific channel on the recorder side provided that this configuration is compatible with the connection type the recorder is configured for. You can do this as follows:

  1. Log in to the Configuration Manager of the recorder where your screen channels are

  2. Go to Recording -> Recording Interfaces, expand the Screen Agent Interface and click on the gear icon of the channel you would like to configure

  3. Under ‘Screen Agent Settings’ you will see the ‘Use Secure Connection’ check box. You can configure this based on what connection types the recorder is configured for and then click ‘Save’

Note

It is important to know what type of Screen Agent DX connections the recorder is configured for before making any configuration change of the connection type on the screen channel. If for example the recorder is configured for ‘SSL Only’ connections, but you change the channel configuration to not use secure connections, then recording will stop. If you want recording to resume on this channel, then you will either have to change the Screen Agent connection type to ‘Both’ or ‘Unencrypted’ on the recorder side, or you will have to delete the configuration on the client side and then configure it to claim/reclaim a channel with a secure connection.

8.6. Configuring SSL After an Upgrade

If you are upgrading from a software version that did not support Screen Agent DX SSL connection configurations to a software version that does, you will need to do the following to enable an SSL connection on an existing screen channel :

  1. After upgrading the recorder, log in to the Configuration Manager of the recorder where you are screen recording to

  2. Go to Recording -> Recording Interfaces, and click on the gear icon of the screen channel

  3. Under the ‘Screen Agent Settings’ section, click the ‘Upgrade’ button that is by the ‘Screen Agent Version’ field

  4. Wait for a few minutes and then reload the page that has the ‘Screen Agent Version’ information. Once the version number has updated you can proceed to the next step.

  5. On the same page, and again under the ‘Screen Agent Settings’ section, check the ‘Use Secure Connection’ option and click ‘Save’

  6. While still in the Configuration Manager, go to Users and Security -> SSL, and select the ‘Connection Settings’ tab

  7. Choose the connection type that best suits your requirements and click ‘Save’

Note

It is important that if you are configuring the recorder to only accept SSL connections, then you must configure the screen channel’s SSL setting first (as seen above in step 5) before configuring the general recorder SSL setting (as seen above in step 7). If it is not done in this order then the client will not be able to establish a connection with the recorder.