Install Stunnel

Prepare for Stunnel Install

• Please note that installation does require a reboot of your PC / workstation.
• You may need Admin level access to your PC to complete the install.
• Download the latest version of stunnel here.
• Download the Fiserv Certificate files here.

Installing Stunnel

• Install the most recent version of stunnel (5.75 in June 2025.)
  • Choose the options that are appropriate for your organization.
  • By default, stunnel will be installed in C:\Program Files (x86)\
  • During installation you will be asked questions to create a default certificate. This certificate will not be used, so you can enter whatever values you choose or just press Enter on all of the prompts.
  • Do NOT run stunnel at the end of installation.

Install the Certificates

Follow these steps to install the certificates:

unzip the Stunnel_Certs_May_2024.zip file
copy stunnel.pem and certs.pem to C:\Program Files (x86)\stunnel\conf

Customize the Stunnel Configuration

• Edit the stunnel configuration file. The file is located here:

C:\Program Files (x86)\stunnel\conf\stunnel.conf

• Remove the semi-colon comments from the debug and output lines (lines 11 & 12):

debug=info
output=stunnel.log

• Add the following lines after "output=stunnel.log":

CAfile = certs.pem
cert = stunnel.pem

[Visimage Linux Prod]
; Prod connection to Linux
client = yes
accept = 30503
connect = visimage.fiservapps.com:8004

[Visimage Linux Cert]
; Cert connection to Linux
client = yes
accept = 30504
connect = visimage-cert.fiservapps.com:8004

Install the Stunnel Service

• Install the stunnel service using Powershell. If you installed stunnel for all users on the computer, you may need to run Powershell as the Administrator.
• When Windows Powershell is running, enter the following commands:

cd C:\Program Files (x86)\stunnel\bin
./stunnel -install

• Reboot your PC.

Verifying the Installation

• Run Windows Services and verify that the stunnel service is running. The service is called "Stunnel TLS Wrapper".
• If the service is running, launch Visimage3 and test that you are able to successfully start server.

Back...