App Control: How To Export the App Control Agent Communication Certificate

App Control: How To Export the App Control Agent Communication Certificate

Environment

  • App Control (Formerly Cb Protection) Console: 7.x - 8.x
  • Microsoft Windows: All Supported Versions

Objective

To export the App Control Console certificate. 

Resolution

  1. Open the App Control console
  2. Navigate to System Configuration (gear icon in 8.x) > Security Tab.
  3. Under "Current Server Certificate Details" is information regarding the current certificate.
    • Note the "Common Name" and "Expiration date"
  4. On the App Control server, go to Start > Run > type “mmc” > click OK.
  5. The Microsoft Management Console (mmc) window will open
  6. Go to File > click on “Add/Remove Snap-in”
  7. Select “Certificates” > click the “Add” button
  8. Select “Computer account” > click “Next”
  9. Select “Local computer” > Click “Finish” > then, click “OK”
  10. In the left hand pane, click the plus sign on “Certificates” to expand it
  11. Click the plus sign on “Trusted People” to expand it > select “Certificates”
  12. In the right-pane, there should be a certificate for the App Control console > double-click to open the properties
  13. On the Details tab:
    1.  Select "Valid to"
      • Confirm this matches the "Expiration Date" shown in step 3
    2. Select "Subject"
      • Confirm the "CN" matches the "Common Name" shown in step 3
  14. Export the Certificate:
    1. Right click the certificate and choose  > All Tasks > Export.
    2. Choose weather or not the export the private key
      • If the certificate needs to be imported into IIS, choose to export the private key:
        1. Select "Include all certificates in the certification path if possible" and "Export all extended properties" > Click Next
        2. Select "Password" and give the certificate a password > Click Next
        3. Click "Browse" > Select a name and location to save the certificate > Click Next
        4. Click Finish
      • If the private key is not necessary:
        1. Select "DER encoded binary X.509 (.CER) > Click Next
        2. Click "Browse" > Select a name and location to save the certificate > Click Next
        3. Click Finish

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-17-2018
Views:
3272
Contributors