Kaspersky Anti Targeted Attack Platform

Uploading your own TLS certificate in the administrator menu of the Sensor server

You can prepare your own TLS certificate and upload it to the Sensor server using SCP. For more details on the methods for uploading files via the SCP protocol, see the documentation for the operating system installed on the computer from which you want to upload the TLS certificate.

The TLS certificate file prepared for upload to the server must satisfy the following requirements:

• The file must contain the certificate itself and a private encryption key for the connection.
• The file must be in PEM format.
• The file name must be kata.pem.
• The private key length must be 2048 bits or longer.

For more details on preparing TLS certificates for import, please refer to the documentation on Open SSL.

To upload your own TLS certificate to the Sensor server using SCP, do the following in your computer's SCP interface (Linux is used in the example):

1. Run the following command: scp kata.pem admin@<IP address of the server with the Sensor component>:
2. At the password prompt, enter the administrator password for managing the administrator menu of the Sensor server that was set during installation.

The TLS certificate is uploaded to the server with the Sensor.

To apply the uploaded TLS certificate on the Sensor server, do the following in the administrator menu of the Sensor server:

1. In the main window of the administrator menu, select Program settings.
2. Press ENTER.

   This opens the next window of the administrator menu.

3. Select Manage server certificate.
4. Press ENTER.

   This opens the Certificate management window.

5. In the lower part of the window, select Install from file.
6. Press ENTER.

The certificate will be applied. The data of previously installed certificates will be overwritten.