Table of Contents

[V7][V8][V9] FAQ: How do I renew the Ahsay self-signed SSL and CA certificate on my AhsayCBS backup server?

Article ID : 5429
Reviewed : 2023-12-07

Product Version:
AhsayCBS: 7.5.0.0 to 7.x, AhsayCBS: 8.1.0.0 to 8.x, AhsayCBS: 9.1.0.0 to 9.x
OS: ALL

ATTENTION 1st January, 2022: v7 officially End-of-Life [details]

Description

This document contains instruction on how to renew the expiring Ahsay self-signed SSL and CA certificate on your AhsayCBS v7, v8 and v9 backup server.

The Ahsay default self-signed SSL Certificate or Dummy SSL Certificate on AhsayCBS will expire on January 3, 2024 while the CA Certificate will expire on April 1, 2024. If the Ahsay default self-signed SSL and CA certificates are not renewed before the expiry date:

  1. No AhsayOBM/AhsayACB clients will be able to login to AhsayCBS server using https protocol.
  2. Auto Update, Scheduled and Continuous backups on AhsayOBM/AhsayACB clients using https protocol will stop working.

NOTE
This article only applies if you are using the Ahsay default self-signed SSL and CA Certificate or Dummy SSL Certificate (“Not Secure - Ahsay System Corporation Limited”) that came pre-installed with AhsayCBS and you are not using a SSL and CA Certificate purchased from a CA.

AhsayOBM/AhsayACB clients using pre-9.7.2.0 version will not be able to connect to AhsayCBS once the new SSL and CA certificates are applied.

Assumptions:
AhsayCBS installation path: %CBS_INSTALL_PATH%:

Steps

  1. Upgrade all AhsayCBS, AhsayOBM and AhsayACB to v9.7.2.0.
  2. Create a backup of your existing certificate files: ca.crt, ssl.crt and ssl.key.
  3. Download the updated Ahsay self-signed SSL and CA certificates https://download.ahsay.com/support/cbs_upgrade/DefaultCerts/9720-certs.zip.
  4. Unzip the SSL certificate files.
  5. Stop your AhsayCBS service. (Please verify there are no active backup jobs running before stopping the service)
  6. Copy the new SSL certificate files to:
    • For servers in Windows and Linux: %CBS_INSTALL_PATH%\conf folder.
    • For servers using UBS: %CBS_INSTALL_PATH%\system\conf folder.
      •
  7. Start the AhsayCBS service.
  8. Open a web browser with your AhsayCBS server URL and verify the new SSL certificate expiry date is November 1, 2028 and November 2, 2053 for the new CA certificate.
Related:
FAQ: How to provide a higher level of SSL security for AhsayCBS (5116) https://wiki.ahsay.com/doku.php?id=public:5116_faq:how_to_provide_a_higher_level_of_ssl_security_for_ahsaycbs

Keywords

Ahsay, self-signed SSL Certificate, Dummy SSL, cannot connect, renew, https, web SSL