The SMS uses a web security SSL certificate to establish secure communication between a web browser and the SMS server. When the SMS is configured for high availability (HA), the certificate is synchronized across nodes in the SMS HA cluster. You can import a certificate now, or if you have already imported a certificate into the SMS certificate repository, choose the one you want.

In some cases, you might want to replace the default certificate with a root Certificate Authority (CA) signed certificate to establish a trusted relationship between Web clients and the SMS Web server. The SMS client enables you to import an X.509 certificate and corresponding PKCS#8 DER-encoded private key for use as a Web server certificate. If you experience problems with the certificate, you can reset it to the default. The SMS Web Security SSL Certificate area displays the certificate information and allows you to import or reset an existing certificate.

NOTE: The web security certificate is included in an SMS backup and reset during a factory reset. Only the SMS SSL certificate is replaceable. TippingPoint utilizes a special version of OpenSSL for the TPS certificates, and as such, they are not replaceable.