> For the complete documentation index, see [llms.txt](https://docs.adaptiva.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.adaptiva.com/platform/install/server-install/install-platform/install-platform-server-login.md).

# Log in to the server

Log in to the Adaptiva Server web portal

## Log in to the Adaptiva Admin Portal

1. In a web browser, enter the Adaptiva Server Admin Portal URL. If you changed the default Web UI Port, specify the port in the URL: `https://`*`<AdaptivaServerFQDN>`*`[:Port]`.

   Example: `https://adaptivaserver.mycompany.org:9678`

   ![Image of the Adaptiva Admin Portal log in screen](https://1238239958-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FzBcNZqjCKqgdpA83eD4o%2Fuploads%2Fgit-blob-cd8c34a224a02b7248dc3ce9df2c2ed8fa8dab0c%2Flogon-screen.png?alt=media)

   <div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>If you see the message <strong>Your connection isn't private</strong>, follow the steps in <a href="#add-certificate-to-the-root-store">Add certificate to the root store</a>.</p></div>
2. At the Adaptiva Web Portal, click **Log in with Active Directory**. If an Adaptiva login account was created during server installation, enter the email address and password and click **Log in**.
   * If you are using Mozilla Firefox, see Resolve the [Mozilla Firefox Active Directory Login Issue](https://support.adaptiva.com/hc/en-us/articles/37109022499341-Resolve-the-Mozilla-Firefox-Active-Directory-Login-Issue) KB article.
3. If you have not yet added a license, proceed to [Add a license](/platform/install/server-install/install-platform/install-platform-add-license.md).

## Add certificate to the root store

If a self-signed certificate was selected, you should import the certificate into the Trusted Root Certification Authorities container on every device where the Adaptiva Admin Portal will be accessed. Each OneSite Administrator who will use the Admin Portal from a remote device will need to import the certificate. Alternatively, the certificate can be deployed using a GPO or Intune policy.

### Download and install the certificate (Windows)

You have two options for downloading and installing the certificate:

#### Option 1: Download the certificate from the browser page

1. In a web browser, enter the Adaptiva Server Admin Portal URL. If you changed the default Web UI Port, specify the port in the URL: `https://`*`<AdaptivaServerFQDN>`*`[:Port]`.

   Example: `https://adaptivaserver.mycompany.org:9678`
2. You will see the message **Your connection isn't private**.
3. Click on the text **Not secure** next to the Address URL.

   ![Connection Warning](https://1238239958-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FzBcNZqjCKqgdpA83eD4o%2Fuploads%2Fgit-blob-bbbd849a3fe3925c8bef80268c4e30445471685c%2Fnot-secure-cert.png?alt=media)
4. Click on **Certificate details** to view the certificate.
5. Select the **Details** tab.
6. Click on **Export**.
7. Select a destination (your **Downloads** folder) - leave the default filename of `<servername>.crt`.

   <div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>Make sure the filename has the <code>.crt</code> extension. If your fully qualified domain name ends with <code>.com</code>, you may need to add the <code>.crt</code> extension.</p></div>
8. Close your browser.
9. In File Explorer, browse to the saved certificate and double-click it.
10. Select **Install Certificate...**.
11. Select **Local Machine (recommended)** and click **Next**.
12. Select **Place all certificates in the following store**.
13. Click **Browse**, select **Trusted Root Certification Authorities** and click **OK**.
14. Click **Next** and then click **Finish**.

#### Option 2: Download the certificate from the registry

1. The certificate is stored in the registry at `HKLM\SOFTWARE\Adaptiva\server\certificates.cloudui_public_cert`
2. The data can be saved into a UTF-8 formatted text file with a .crt extension.
3. You can then run the following command to import the certificate:

   `Certutil.exe -addstore root "<path>\<servername>.crt"`

### Download and install the certificate (MacOS)

Importing a self-signed certificate into Safari on macOS involves adding it to the Keychain Access utility and explicitly setting it to "Always Trust." Safari relies on the macOS system keychain for certificate validation.

#### Import and Trust Self-Signed Certificates (macOS)

1. Go to the **Keychain Access** app on your Mac. To open Keychain Access, search for it in **Spotlight**, then press **Return**.
2. When prompted, enter your password and click **OK**.
3. In the left-hand navigation, under **System Keychains**, click **System**.

{% hint style="info" %}
Using **System** makes it available for all users; alternatively, use **login** for just your user.
{% endhint %}

1. Drag and drop the certificate file (.cer, .crt, or .pem) into the list of certificates, or go to **File > Import Items** and select the file.
2. In the certificates list, double-click to open the certificate.
3. Expand the **Trust** section by clicking the arrow next to it.
4. From the **When using this certificate** drop-down, select **Always Trust**.
5. Close the window and enter your administrator password to confirm the changes.
6. Close and reopen Safari to apply the changes.

#### Alternative Quick Method (Via Browser)

If you are visiting the site with the self-signed certificate:

1. When the "Safari can't verify the identity of the website" message appears, click **Show Certificate**.
2. Check the box **Always trust \[site name] when connecting to \[site name]**.
3. Click **Continue** and enter your administrator password.

#### Importing Self-Signed Certificates on iOS (iPhone/iPad)

1. Transfer the certificate to the device (ex. email yourself the .crt / .pem file) and open it.
2. Install the profile by navigating to **Settings**, tap **Profile Downloaded**, and select **Install**.
3. Enable Full Trust by going to **Settings > General > About > Certificate Trust Settings**, and toggling **ON** for the self-signed certificate.

#### Troubleshooting

* **Certificate Still Not Trusted**: If you are using macOS Mojave or later, you might need to use the terminal to remove previous HSTS settings for that site:

`sudo /usr/libexec/PlistBuddy -c "Delete :com.apple.CFNetwork.defaultStorageSession:your.server.name" $HOME/Library/Cookies/HSTS.plist`

* **Old Certificate Cached**: After changing trust settings, restart nsurlstoraged using the command `killall nsurlstoraged` in Terminal.

### Test the certificate

1. In your browser, enter the Adaptiva Server name with optional *:port* - `https://`*`<servername>`*`[:port]`.
2. You will now see the Admin Portal login page.
3. There will now be a lock icon next to the URL

   ![Secure Site Details](https://1238239958-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FzBcNZqjCKqgdpA83eD4o%2Fuploads%2Fgit-blob-80b6b764d852778d4518704f6551dcc3e10dcfb3%2Fimage34.png?alt=media)
