User Tools

Site Tools

You are here: Ahsay Wiki » Welcome to AhsayWiki » 5249_faq » [V7][V8][V9] FAQ: How do I renew the Ahsay self-signed SSL and CA certificate on my AhsayCBS backup server?

Sidebar

Announcement

Ahsay Backup Software

Backup Set Types

Supported Storage

Features in OBM / ACB

Features in CBS

Brand and Customize

License

Documentation

Performance Testing

FAQs and Known Issues

Can't Find What You Need?

public:5249_faq:how_do_i_renew_the_ahsay_self-signed_ssl_certificate_on_my_ahsaycbs_v7_backup_server

Table of Contents

[V7][V8][V9] FAQ: How do I renew the Ahsay self-signed SSL and CA certificate on my AhsayCBS backup server?

Article ID : 5429
Reviewed : 2023-12-07

Product Version:
AhsayCBS: 7.5.0.0 to 7.x, AhsayCBS: 8.1.0.0 to 8.x, AhsayCBS: 9.1.0.0 to 9.x
OS: ALL

ATTENTION 1st January, 2022: v7 officially End-of-Life [details]

Description

This document contains instruction on how to renew the expiring Ahsay self-signed SSL and CA certificate on your AhsayCBS v7, v8 and v9 backup server.

The Ahsay default self-signed SSL Certificate or Dummy SSL Certificate on AhsayCBS will expire on January 3, 2024 while the CA Certificate will expire on April 1, 2024. If the Ahsay default self-signed SSL and CA certificates are not renewed before the expiry date:

  1. No AhsayOBM/AhsayACB clients will be able to login to AhsayCBS server using https protocol.
  2. Auto Update, Scheduled and Continuous backups on AhsayOBM/AhsayACB clients using https protocol will stop working.

NOTE
This article only applies if you are using the Ahsay default self-signed SSL and CA Certificate or Dummy SSL Certificate (“Not Secure - Ahsay System Corporation Limited”) that came pre-installed with AhsayCBS and you are not using a SSL and CA Certificate purchased from a CA.

AhsayOBM/AhsayACB clients using pre-9.7.2.0 version will not be able to connect to AhsayCBS once the new SSL and CA certificates are applied.

Assumptions:
AhsayCBS installation path: %CBS_INSTALL_PATH%:

  • Windows (default): C:\Program Files\AhsayCBS
  • Linux (default): /usr/local/cbs
  • AhsayUBS (default): /ubs/mnt/eslsfw/obsr

    Note: The installation path may be different for branded AhsayCBS servers.

Steps

  1. Upgrade all AhsayCBS, AhsayOBM and AhsayACB to v9.7.2.0.
  2. Create a backup of your existing certificate files: ca.crt, ssl.crt and ssl.key.
  3. Download the updated Ahsay self-signed SSL and CA certificates https://download.ahsay.com/support/cbs_upgrade/DefaultCerts/9720-certs.zip.
  4. Unzip the SSL certificate files.
  5. Stop your AhsayCBS service. (Please verify there are no active backup jobs running before stopping the service)
  6. Copy the new SSL certificate files to:
    • For servers in Windows and Linux: %CBS_INSTALL_PATH%\conf folder.
    • For servers using UBS: %CBS_INSTALL_PATH%\system\conf folder.
      •
  7. Start the AhsayCBS service.
  8. Open a web browser with your AhsayCBS server URL and verify the new SSL certificate expiry date is November 1, 2028 and November 2, 2053 for the new CA certificate.
Related:
FAQ: How to provide a higher level of SSL security for AhsayCBS (5116) https://wiki.ahsay.com/doku.php?id=public:5116_faq:how_to_provide_a_higher_level_of_ssl_security_for_ahsaycbs

Keywords

Ahsay, self-signed SSL Certificate, Dummy SSL, cannot connect, renew, https, web SSL

public/5249_faq/how_do_i_renew_the_ahsay_self-signed_ssl_certificate_on_my_ahsaycbs_v7_backup_server.txt · Last modified: 2024/01/04 10:25 by clarence.lee

Page Tools