App Control: How To Export the App Control Agent Communication Certificate

[#1]

Environment

• App Control Console: All Supported Versions
• Microsoft Windows: All Supported Versions

Objective

To export the App Control Console certificate.

Resolution

Locating The Relevant Certificate For Export:

1. Login to the App Control Console and navigate to the gear icon > System Configuration > Security.
2. Take note of the Current Server Certificate Details and verify the, "Common Name" and "Expiration Date".
3. Login to the application server hosting the App Control Console as the Carbon Black Service Account.
4. Click Start > Run > certlm.msc > OK.
5. In the left-hand pane expand: Trusted People > Certificates.
6. Right click the relevant Certificate in the right-hand pane and choose: All Tasks > Export.

Exporting For Use With IIS:

1. When prompted choose: "Yes, export the private key" then click Next.
2. Check the options:
   • Include all certificates in the certification path if possible.
   • Export all extended properties.
   • Enable certificate privacy.
3. Check the box to enable and specify a Password.
4. Determine the location to save the exported Certificate.

Exporting For Use With Agent Communication/Trusted Communication Certificates:

1. When prompted choose: "No, do not export the private key" then click Next.
2. Choose "DER encoded binary X.509 (.CER)".
3. Determine the location to save the exported Certificate.

Related Content

App Control: How to Replace Server Certificate in Version 8.x and Higher
App Control: How To Bind a New Certificate to Parity Web Console in IIS
App Control: How to Export and Import a Self-Signed Certificate for Disconnected Devices
App Control: How to Export Parity Web Console IIS Certificate