Updating SSL Certificate Manually

In some cases, for example, if you cannot access the Dr.Web CMS Web Console due to browser errors or lack of internet access, you may need to update the SSL Certificate manually. To do this, you can use the Https Tools utility, which is located in the Dr.Web plug-in folder.

To update an SSL Certificate manually

1.Run the command-line tool with administrator rights.

2.Open the Dr.Web plug-in folder and run the HttpsTool.exe with the following parameters:

Specify the necessary values for:

-c <common name>—Common Name (CN) attribute;

-d <domain_name>—domain server name;

-i <IP_address>—server network address.

As a result, ca_root.key, ca_root.crt, and server.pem files will be created in the Dr.Web plug-in folder.

3.Manually restart the Dr.Web CMS Web Console service on the server.

4.Install the updated ca_root.crt root certificate into the Trusted Root Certification Authorities store on computers that have remote access to Dr.Web CMS Web Console.

You can also generate a key with Diffie-Hellman protocol parameters. To do this, execute the following command in the console:

As a result, a dh.pem file will be created in the Dr.Web plug-in folder. It may take some time to generate the file.

In case of successful execution of command, Https Tool will automatically finish the work. If errors occur during operation, they will be displayed in the console.