Connecting remotely to Local Run Manager v4 on instrument

Local Run Manager uses HTTPS to encrypt data connections to make sure that run data information is private and secure. Security certificate settings should only be changed in the following situations:

• Access Local Run Manager from a new remote device • Use your own custom security certificate • Regain access to Local Run Manager after changing the system name or moving the system to a new domain

Install a Security Certificate For Remote Access

1. On the remote device, login to Local Run Manager.

2. From the dashboard navigation bar, select the Tools drop-down list, and then select System Settings.

3. Select the Certificates tab.

4. Select Download to download a zip file that contains the Local Run Manager certificate.

5. Extract the contents of the zip file.

6. Right-click the BAT file and select Run as administrator.

7. Follow the prompts to finish the installation, and then restart your browser. Upload a Custom Security Certificate

To replace the existing Local Run Manager certificate, do the following

1. From the dashboard navigation bar, select the Tools drop-down list, and then select System Settings.

2. Select the Certificates tab.

3. Select Browse, select the new certificate file (\*.pfx), and then select Open.

4. Enter the password for the certificate file, and then select Set Certificate.

5. Restart your browser. Regenerate a Security Certificate

If there was recent change to the system name or the system was moved to a new domain, you must regenerate the security certificate to regain access to Local Run Manager.

1. Launch Local Run Manager via HTTPS.

2. From the dashboard navigation bar, select the Tools drop-down list, and then select System Settings.

3. Select the Certificates tab.

4. Select Regenerate the Certificate.

5. Restart your browser.

6. If you need to connect to Local Run Manager from another device, download and install the regenerated certificate on the remote device.

• Select Regenerate the Certificate. • Select Download to download a zip file that contains the Local Run Manager software certificate. • Extract the contents of the zip file. • Right-click the BAT file and select Run as administrator. • Follow the prompts to finish the installation, and then restart your browser.

When connecting remotely to the Local Run Manager (LRM) instance running on an instrument, users must use the computer name given to the instrument on their network, rather than the IP address in order to connect securely over https. For example, https:// should be used rather than https://

If customers install the security certificates and must connect via IP address, they may be able to connect via https and choose to proceed anyway. In some instances, they will not be able to proceed once the certificate is installed because it is gets flagged as invalid. In this case, the following steps should allow them to connect:

1. Go to the Start menu and type inetcpl.cpl

2. Right click the results and select Run as administrator

3. Go to the Content tab and select Certificates

4. Remove the certificate called "LRMRootCA" from the Intermediate Certification Authorities and Trusted Root Certification Authorities tabs (if present).

5. Close the Certificates window and click OK on the Internet Properties window

6. Navigate to https://nextseq-ip-address and click the Advanced button.

7. Click the "Proceed to https://nextseq-ip-address (unsafe)" link to continue to the LRM interface

This should allow the customer to connect over https://. The connection however will not be secured.

Tags: Local Run Manager, LRM, NextSeq, MiSeq, connect, remote, IP address

Resource https://support-docs.illumina.com/SW/lrm_v4/Content/SW/LRM/LRM_v3/SystemCertificates_swLRM.htm

For any feedback or questions regarding this article (Illumina Knowledge Article #2323), contact Illumina Technical Support [e-mail].