Renew Ahsay Self-Signed SSL and CA Certificates on AhsayCBS
Article ID
Last Reviewed Date
Product Version
Operating System
Description
This Know-How article contains instructions on how to renew the expiring Ahsay self-signed SSL and CA certificate on your AhsayCBS v7, v8 and v9 backup server.
The Ahsay default self-signed SSL Certificate or Dummy SSL Certificate on AhsayCBS will expire on January 3, 2024 while the CA Certificate will expire on April 1, 2024. If the Ahsay default self-signed SSL and CA certificates are not renewed before the expiry date:
- No AhsayOBM/AhsayACB clients will be able to login to AhsayCBS server using https protocol.
- Auto Update, Scheduled and Continuous backups on AhsayOBM/AhsayACB clients using https protocol will stop working.
This article only applies if you are using the Ahsay default self-signed SSL and CA Certificate or Dummy SSL Certificate ("Not Secure - Ahsay System Corporation Limited") that came pre-installed with AhsayCBS and you are not using an SSL and CA Certificate purchased from a CA.
AhsayOBM/AhsayACB clients using pre-9.7.2.0 version will not be able to connect to AhsayCBS once the new SSL and CA certificates are applied.Assumptions:
AhsayCBS default installation path: %CBS_INSTALL_PATH%
- Windows: C:\Program Files\AhsayCBS
- Linux: /usr/local/cbs
- AhsayUBS: /ubs/mnt/eslsfw/obsr
Solution
To renew the expiring Ahsay self-signed SSL and CA certificates:
- Upgrade all AhsayCBS, AhsayOBM and AhsayACB to v9.7.2.0 or above.
- Create a backup of your existing certificate files: ca.crt, ssl.crt and ssl.key.
- Download the updated Ahsay self-signed SSL and CA certificates.
- Unzip the SSL certificate files.
- Stop your AhsayCBS service. (Please verify that there are no active backup jobs running before stopping the service)
-
Copy the new SSL certificate files to:
- For servers in Windows and Linux: %CBS_INSTALL_PATH%\conf folder.
- For servers using UBS: %CBS_INSTALL_PATH%\system\conf folder.
- Start the AhsayCBS service.
- Open a web browser with your AhsayCBS server URL and verify the new SSL certificate expiry date is November 1, 2028 and November 2, 2053 for the new CA certificate.