Make Showcase reachable from phones

Do this once on each Showcase server before using an Access QR, audience upload QR, or Hosted Site outside the server itself.

You need: a Showcase administrator account and, for internet access, a DNS name controlled by your organization.

1. Open Network & Public Access

1. Sign in to the Showcase Editor.
2. In the left menu, open Admin → Network & Public Access.
3. Review the detected network addresses. These help identify the server, but they are not saved automatically as its public address.

2. Enter the address phones should use

1. In Server public URL, enter the editor/server address, for example https://showcase.example.com.
2. In Audience public URL, enter the address that Access and upload QRs should contain. Usually this is the same address.
3. Do not add a trailing / or page path.
4. Select Save addresses.
5. Use Test public URL and Test phone URL. This checks from the server; the phone test in step 4 remains necessary.

For an isolated demonstration on one Wi-Fi network, an address such as https://192.168.1.40 can work. For a production or internet-facing system, use a DNS name and a certificate issued for that name.

3. Choose a certificate

Recommended: upload your organization's certificate

1. Under HTTPS certificate, choose the PEM certificate/full chain file.
2. Choose its matching PEM private-key file.
3. Select Install certificate.
4. Check the displayed subject, issuer, names, and expiry date.
5. Restart Showcase Server when the page asks you to. The old certificate remains active until the restart, so saving cannot interrupt the current session halfway through.

The private key is stored with restricted permissions and is never displayed again.

Local trial: use the Showcase self-signed certificate

Select Use self-signed certificate, then restart when prompted. Phones will normally show a trust warning unless your organization has installed the Showcase certificate authority on them. This is expected for a self-signed local trial and is not suitable for a public deployment.

4. Test from the device that matters

1. Put a phone on the visitor network.
2. Open the Audience public URL in its browser.
3. Confirm the page loads and the browser reports the expected certificate.
4. Create a test Access QR using Create a Personal Folder with an Access QR, then scan it.

A successful test from the server itself is not enough: guest Wi-Fi isolation, firewalls, DNS, and certificates can behave differently on the phone.

Troubleshooting

Symptom	Most likely cause	What to check
Phone times out	Routing or firewall	Phone and server network, TCP port, guest-network isolation
Name not found	DNS	The public name resolves on the phone's network
Certificate warning	Wrong name, expired chain, or self-signed certificate	Certificate names and expiry shown in the app
QR opens the wrong host	Audience public URL is stale	Correct it in Network & Public Access, then generate a new QR
Installed certificate is not active	Restart still required	Restart Showcase Server during an approved maintenance window

No YAML or command-line editing is part of this workflow.