===== [V7][V8][V9] FAQ: How do I renew the Ahsay self-signed SSL and CA certificate on my AhsayCBS backup server? =====
Article ID
: 5429
Reviewed
: 2023-12-07
Product Version:
AhsayCBS: 7.5.0.0 to 7.x, AhsayCBS: 8.1.0.0 to 8.x, AhsayCBS: 9.1.0.0 to 9.x
OS: ALL
ATTENTION
1st January, 2022: v7 officially End-of-Life [details]
===== Description =====
This document contains instruction on how to renew the expiring Ahsay self-signed SSL and CA certificate on your AhsayCBS v7, v8 and v9 backup server.
The Ahsay default self-signed SSL Certificate or Dummy SSL Certificate on AhsayCBS will expire on
January 3, 2024 while the CA Certificate will expire on April 1, 2024. If the Ahsay default self-signed SSL and CA certificates are not renewed before the expiry date:
-
No AhsayOBM/AhsayACB clients will be able to login to AhsayCBS server using https protocol.
-
Auto Update, Scheduled and Continuous backups on AhsayOBM/AhsayACB clients using https protocol will stop working.
^ NOTE ^
| This article only applies if you are using the Ahsay default self-signed SSL and CA Certificate or Dummy SSL Certificate ("Not Secure - Ahsay System Corporation Limited") that came pre-installed with AhsayCBS and you are not using a SSL and CA Certificate purchased from a CA.\\ \\ AhsayOBM/AhsayACB clients using pre-9.7.2.0 version will not be able to connect to AhsayCBS once the new SSL and CA certificates are applied. |
Assumptions:
AhsayCBS installation path:
%CBS_INSTALL_PATH%:
-
Windows (default):
C:\Program Files\AhsayCBS
-
Linux (default):
/usr/local/cbs
-
AhsayUBS (default):
/ubs/mnt/eslsfw/obsr
Note:
The installation path may be different for branded AhsayCBS servers.
===== Steps =====
-
Upgrade all AhsayCBS, AhsayOBM and AhsayACB to v9.7.2.0.
-
Create a backup of your existing certificate files: ca.crt, ssl.crt and ssl.key.
-
Download the updated Ahsay self-signed SSL and CA certificates
https://download.ahsay.com/support/cbs_upgrade/DefaultCerts/9720-certs.zip.
-
Unzip the SSL certificate files.
-
Stop your AhsayCBS service.
(Please verify there are no active backup jobs running before stopping the service)
-
Copy the new SSL certificate files to:
- For servers in Windows and Linux:
%CBS_INSTALL_PATH%\conf
folder.
- For servers using UBS: %CBS_INSTALL_PATH%\system\conf
folder.
-
Start the AhsayCBS service.
-
Open a web browser with your AhsayCBS server URL and verify the new SSL certificate expiry date is November 1, 2028 and November 2, 2053 for the new CA certificate.
Related:
FAQ: How to provide a higher level of SSL security for AhsayCBS (5116)
https://wiki.ahsay.com/doku.php?id=public:5116_faq:how_to_provide_a_higher_level_of_ssl_security_for_ahsaycbs
===== Keywords =====
Ahsay, self-signed SSL Certificate, Dummy SSL, cannot connect, renew, https, web SSL