FAQ – IT Connection & Security

1. How do I access the web application?

• Access the web applications (listed below) from your Client PC using a web browser (e.g., Google Chrome). The web applications are hosted in Microsoft Azure Cloud Services and require a secured HTTPS connection.

• SSL Certificate Requirement: For security, ensure that the SSL certificate for the SprayCapture unit is valid. Certificates need to be renewed annually, with a warning displayed two months before expiration.

2. Which web addresses need to be whitelisted for the application?

• SprayCapture Web Application:  https://spraycapture.app

• SprayBrush Web Application: https://spraybrush.app

• SprayVision Official Website: https://sprayvision.com

• Bolddesk: https://sprayvision.bolddesk.com (Support Ticketing Portal)

• Knowledge Base portal domains *.hsforms.net, *.hsforms.com, *.sprayvision.com

• Vimeo: https://player.vimeo.com (Video tutorials)

• Google Fonts: https://fonts.googleapis.com (Page styling)

• W3C Standards: https://www.w3.org

• Materialize CSS: https://materializecss.com

• SSL Certificate Requirement: A valid SSL certificate is essential for all HTTPS connections and should be checked and updated as needed within the Trusted Root Certification Authorities of the operating system.

3. How does the capture process work with the SprayCapture unit?

• Within the web application, users operate the SprayCapture unit through a capture button, with secure HTTPS encryption for data transfer.
• The user places the painted plastic film (foil) into the device and initiates the capture process via the button.

4. What happens to the captured foil data?

•  Once captured, image data are sent to the Client PC and securely uploaded to the SprayVision cloud for processing. This process completes within seconds.

5. What kind of authentication is used?

• Client to Web Applications: The default is basic authentication via username and password with the strong password policies. Users can enable 2FA with Google Authentication or use SAML SSO via an IdP.
• Client to SprayCapture Unit: Basic authentication secures communication with the SprayCapture unit over HTTPS.

6. What are the network requirements for the SprayCapture unit?

• The SprayCapture unit and Client PC must be on the same network, with a static IP required for SSL certification purposes.
• The network can be configured via the device’s web interface.

7. What type of access is required for users?

• Client PC: Access depends on company security policies, allowing either local or company accounts.

• SprayCapture Unit: Accessible only through the web application and requires physical access.

• SSL Certificate Requirement: An updated SSL certificate on the SprayCapture unit is necessary to maintain secure access.

8. What security measures protect the SprayCapture unit?

• The SprayCapture unit is a smart device with an internal server secured by an SSL certificate, supporting API communication over HTTPS and admin access protected by authentication.
• SSL Certificate Requirement: SSL certificates are valid for a maximum of 398 days and must be updated annually. A warning will appear two months before expiration.