Follow

Using An Existing SSL Certificate - R9.4 and up

IMPORTANT - Using the SSL Configuration Tool (the Java based tool) will not work in 9.4 or later, you must use the NEW tool outlined in this KB.

If you already have a SSL Certificate installed in MS-IIS and you wish to export and use in the Kaseya Application Firewall Certificate Manager please review the directions below:

1. Start the Microsoft Management Console (MMC) by going to Start->mmc.exe

mmc.png

2. From MMC, choose File->Add/Remove Snap-in

mmc1.png

3. From Add or Remove Snap-ins, select "Certificates" then click "Add" 

mmc-cert.png

4. Select "Computer Account"

mmc-cert1.png

5. Select "Local Computer"

mmc-cert2.png

6. You now see "Certificates (Local Computer) in the selected snap-ins, click "OK"

mmc-cert3.png

7. Select Your Certificate

 In the left-hand pane, open Certificates->Personal->Certificates and it will show you all the SSL Certificates you have installed.  Select the one you wish to export, right click, select "All Tasks" and click "Export"

mmc-export.png

8. Start the Certificate Export Wizard, then click "next"

export1.png

9. You must select "Yes, export the private key", then click "next"

export-private-key.png

10. You must select "PKCS#12 and check "Include all certificates in the certification path if possible" and "Export all extended properties", then click "next"

export-chain.png

11. Provide a name for your export (and browse to the location you want to save it to) then click "next"

export-name.png

12. Give the file a password

export-password.png

13. Complete the export

export_complete.png

14. You have exported the PKCS#12 file with your certificate(s) included.  Please make sure during the export steps above you have selected the following:

a) Export the private key

b) Checked "Include all certificates in the certification path if possible"

c) Checked "Export all extended properties", then click "next"

*You may receive errors or certificate warnings if you did not include the above items during the export.

15. Now You Need to Import Your Certificate File into the Kaseya Application Firewall Certificate Manager.

This can be done either during installation when you are prompted.

Below is a screenshot of the prompt during installation:

sslcertificate.png

Or,

After installation by going to $:\Kaseya\Services\KAF-Tool.exe and using the Kaseya Application Firewall Certificate Manager, the screen will look like this:

 

IMPORTANT - Using the SSL Configuration Tool (the Java based tool) will not work in 9.4 or later, you must use the NEW tool outlined above.

16. Using Either Process, copy your certificate file to a safe location on the machine (where it won't be deleted), then use either of the above pictured interfaces to browse to select that file, enter the password/passphrase you set when you exported it and click update/next.

17. Go to Services and Restart the "Kaseya Edge Services" and the system will now use the SSL Certificate you imported.

Was this article helpful?
2 out of 3 found this helpful
Have more questions? Submit a request

0 Comments

Article is closed for comments.