Perform the following steps to validate that NES uses the self signed certificate.

1. Connect to the NES Administrator Console in a browser by typing https://nes_server/NES_service_name or http://nes_server/NES_service_name
   depending on the NES configuration, where:

   • nes_server is the Fully Qualified Domain Name (FQDN) of the NES host.
   • NES_service_name is the service mapping name for the NES web application. The default service mapping name is nes.

     For example, https://nes.cwp.company.com/nes.

     Note: The service mapping name for NES is defined during deployment. Contact the person who performed the deployment to obtain the NES service mapping name value. Record the URL of ph conkeyref="prod_names/nes"/> in Appendix—Record the CWP Variables. You will use this URL to connect to the NES Administrator Console and require it during the CWP Backend deployment.
2. On the Sign in window, type the credentials of a user that is a member of the NES Administrators group, and then click Sign In.
3. On the main menu, click About.
   The System Diagnostics page appears.
4. Click View Full System Diagnostics. When the test completes, review the status of the diagnostic test results and confirm that the TLS certificate test displays a Pass status, as shown in the following figure.