Where to update Custom CA SSL Certificate on ESET Protect Web Interface

[Murtaza Abbasi 0]

Dear all,

We have a Client-Server architecture setup here at our office, and we have purchase ESET business where we are using 4 client and 2 server antivirus and using ESET Protect web console to manage all clients and servers. We have our own CA and updated all agents on Server and Clients and to make it work we have imported Certificate of our CA in ESET Protect and everything is working fine. Only single ESET Protect Web Console is left and don't know where to update the certificate for that agent. I also want to apply SSL Cert for web console so that we can access ESET Protect web portal security using HTTPS protocol...

[Marcos 4,187]

Did you install ESET PROXY on Windows or Linux? If Windows, did you use the all-in-one installer or you installed components separately? If Linux, is it VA or you performed a component installation?

The all-in-one installer for Windows allows for selecting a custom SSL certificate for the webconsole:
https://support.eset.com/en/kb7856

[Murtaza Abbasi 0]

Sorry for not mentioning it, it is ESET Protect VA (CentOS)...

[ONJC 1]

Hi, I would also be interested in this answer, we have just installed a new ESET PROTECT server virtual appliance and we would also like to change the web certificate issued by our authority.

[Murtaza Abbasi 0]

On 3/16/2022 at 3:08 PM, Marcos said:

Did you install ESET PROXY on Windows or Linux? If Windows, did you use the all-in-one installer or you installed components separately? If Linux, is it VA or you performed a component installation?

The all-in-one installer for Windows allows for selecting a custom SSL certificate for the webconsole:
https://support.eset.com/en/kb7856

Hi there, we are waiting for any reply...

[Marcos 4,187]

Please follow the instructions at https://support.eset.com/en/kb7847

[ONJC 1]

Hi, a colleague has already solved this. He generated a certificate on the Eset protect Client Certificates website, directly to the address, which he then exported to PFX and exchanged using an ssh connection to the virtual server.

copy server-tomcat.pfx to /etc/tomcat/server-tomcat.pfx
restorecon /etc/tomcat/server-tomcat.pfx (SELinux)
vi /etc/tomcat/server.xml
...
         keystoreFile = "/etc/tomcat/server-tomcat.pfx"
                keystorePass = "***"
                keystoreType = "PKCS12"
                />
systemctl restart tomcat