DNS & TLS Certificate Configuration

Chipmunk requires a valid DNS name and HTTPS certificate to operate securely inside your network.

This guide helps you configure:

• An internal DNS name (e.g., chipmunk.yourcompany.local)
• A TLS certificate (PEM format recommended)

Choose a hostname for your Chipmunk appliance. This will be used in your App Registration and accessed in your browser.

Examples:

• chipmunk.yourcompany.local
• chipmunk.archive.yourdomain.com

Then:

• Create a DNS A record in your internal DNS pointing to the Chipmunk appliance's static IP address
• Ensure this name resolves from any machine that will access the dashboard

Chipmunk supports TLS certificates in PEM format, which must include:

• The full certificate chain
• The private key

You can use:

• A certificate from a trusted public CA (preferred)
• A certificate issued by your internal CA
• A self-signed certificate (supported, but browser warnings will occur)

Recommended PEM file structure:

-----BEGIN CERTIFICATE-----
[your certificate]
-----END CERTIFICATE-----
-----BEGIN PRIVATE KEY-----
[your private key]
-----END PRIVATE KEY-----

Upload your PEM files during setup or place them in the correct path as instructed by the configuration wizard.

If you don’t have access to a public or internal CA, Chipmunk can generate a self-signed certificate during setup.

Important Notes:

• You will see browser warnings when accessing the appliance over HTTPS
• Functionality is unaffected, but user experience is impacted
• You can replace the self-signed cert with a real certificate at any time

Make sure the Common Name (CN) or Subject Alternative Name (SAN) in your certificate matches the DNS name you plan to use.

For example: If you access Chipmunk at https://chipmunk.yourcompany.local, then the cert must include that hostname.

When running the Chipmunk setup wizard after deploying the appliance, have the following ready:

• ✅ The full DNS name (e.g. chipmunk.yourcompany.local)
• ✅ A PEM-formatted TLS certificate and private key
• ✅ OR choose the option to generate a self-signed certificate

Next: Complete the First-Time Configuration

chipmunk dns tls certificate ssl setup pem selfsigned