Step by Step Guide - Installing an SSL certificate on Apple TV and PlexConnect on Mac

Discussion in 'Media Guides' started by Nimrod, Nov 9, 2013.

  1. Nimrod

    Nimrod Exotic Vendor

    Joined:
    Jun 1, 2007
    Messages:
    1,991
    Likes Received:
    533
    Location:
    London, United Kingdom
    plex-on-apple-tv-2-3-300x288.jpg

    PlexConnect is a great way to get your Plex library on any Apple TV regardless of if its jailbroken or not. It takes over the Apple Trailers app and instead provides your entire Plex Library.

    However recently Apple forced SSL on the trailers App in an attempt to stop people hijacking it and replacing it with other content like Plex, luckily by following the below you can quickly install a fake certificate onto your AppleTV and your PlexConnect and get normal service resuming very quickly.

    Step 1: Generating your Trailer’s Certificate

    To begin with, we need to generate a certificate for the Apple Trailers domain. This is easy to do on Mac OSX, all you need to do is fire up a terminal window and enter the first line of code:

    Code:
    openssl req -new -nodes -newkey rsa:2048 -out ~/Desktop/trailers.pem -keyout ~/Desktop/trailers.key -x509 -days 7300 -subj "/C=US/CN=trailers.apple.com"
    step1-part1.png

    This will generate two files which will be sitting on your Desktop. Next, run the below line of code:

    Code:
    openssl x509 -in ~/Desktop/trailers.pem -outform der -out ~/Desktop/trailers.cer && cat ~/Desktop/trailers.key >> ~/Desktop/trailers.pem
    step1-part2.png

    All done, you should now have three files sitting on your desktop. trailers.pem, trailers.cer and trailers.key

    step1-part3.png

    Step 2: Installing Certificates onto AppleTV

    Connect your Apple TV to the mains first (this is important, otherwise your device will go into recovery mode), secondly connect the Apple TV to your Mac via a Micro USB cable.

    Next, install the Apple Configurator from the Mac App Store (don’t worry, it’s free!). Link to Apple Configurator: https://itunes.apple.com/gb/app/apple-configurator/id434433123?mt=12

    appletv-step1.png

    Once installed, open it up and click the Prepare Tab on the top. Your need to give it a Name (I just used appletv-fix, but you can use any). Untick the Erase before installing tixbox like below then click ‘Install Profiles…’

    appletv-step2.png

    Providing your AppleTV is connected correctly, you will then see the below screen on which you just need to click Next:

    appletv-step3.png

    You will then be given the choice to create a new profile or install a pre-made profile. At this stage unless you have done this before you will have pre-made profiles in which case you click ‘New…’

    appletv-step4.png

    On the new page you will start in the general tab, repeat the name you entered before:

    appletv-step5.png

    Then scroll down on the left hand side to the Certificates Tab and click Configure:

    appletv-step6.png

    Locate the .cer file from the certificate files you made in Step 1 and click ‘Open’.

    appletv-step7.png

    Once done, you should see the certificate loaded into your Profile:

    appletv-step8.png

    Click ‘Save’ and you’re done!

    You are now ready to install to the device, tick your new Profile and click the Next button to install:

    appletv-step9.png

    All going well, you will be presented with a Green Tick like below and your Apple TV is ready to go with your self-generated certificate!

    appletv-step10.png

    Step 3: Installing Certificates into PlexConnect

    This step is easy, just take the trailers.pem file created in Step 1, and place in the /assets/certificates folder in your PlexConnect like so:

    step-3.png

    If the folder doesn’t already exist, make sure your running the latest PlexConnect and make the folder if all else fails.

    In your Settings.cfg the below line should already exist (but if not, add it):

    Code:
    certfile = ./assets/certificates/trailers.pem
    port_ssl = 443
    
    You are now all set to resume normal service! :)

    - Credit goes to Paul Kehrer who found this workaround.
     
    xzKinGzxBuRnzx, InsaneNutter and Rick like this.

Share This Page