1072 - How to configure a trusted certificate on the AccountServer/StorageServer

Modified on Mon, 21 Jul at 12:48 PM

When using the Storage Platform API with other applications, like cloud services, the backup service requires the use of a trusted certificate authority (CA) certificate.

This can be achieved by configuring a trusted CA certificate on an alternative port for the AccountServer and StorageServer as follows:

 

A. Install the CA certificate into the Trusted Root Certificate Authorities Store

  1. Open Microsoft Management Console.

  2. Select File, and click Add/Remove Snap-in….

  3. Select the Certificates snap-in, and click Add.

  4. Select Computer account, and click Next.

  5. Select Local computer, and click Finish.

  6. Click OK.

  7. In the left pane, expand Certificates (Local Computer).

  8. Choose a store to import:

    1. If you have the Root CA certificate for the company that issued the certificate, choose Trusted Root Certification Authorities.

    2. If you have the certificate for the server itself, choose Personal.

  9. Right-click the store, choose All Tasks and click Import.

  10. Follow the wizard and provide the certificate file you have.

B. Configure the AccountServer / StorageServer

1. View the certificate and copy the certificate SerialNumber.

2. Add the following two settings to your AccountServer / StorageServer settings.xml:

<AltPublicPort>9443</AltPublicPort>
<AltServerCertSerialNumber>{cert serial number}</AltServerCertSerialNumber>

3. View the certificate via your browser e.g.: https://Account_IP:9443.

4. Confirm that the serial numbers match.

Note: The Console and Agents trust only the Redstor root certification and will not function over the alternative port.

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article