Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Changing SecureCloud certificate from SHA1 to SHA2

    • Updated:
    • 20 May 2016
    • Product/Version:
    • SecureCloud as a Service 3.7
    • SecureCloud On-Premise 3.7
    • Platform:
    • N/A N/A
Summary

SecureCloud will be changing its certificate from SHA1 to SHA2 this August 2016.

Since the SecureCloud Agent contains only the SHA1 certificate, the validation of the certificate may fail after the SecureCloud server upgraded the SHA1 certificate to SHA2 certificate.  As a result, the encrypted disks could not be mounted correctly.

Details
Public

Root Volume Encrypted

For Linux platform

Apply ignore_ssl_tool before migration.

Ignore ssl tool usage:

The tool will function only when the SCAgent service is stopped.

    1. Unzip ignore_ssl_tool.zip.
    2. Copy the ignore_ssl_tool in securecloud directory.

      # cp ignore_ssl_tool /var/lib/securecloud/

    3. Add permission to the tool.

      # chmod 755 ignore_ssl_tool

    4. Stop SecureCloud Agent service

      % service scagentd stop

    5. Launch ignore ssl  tool.

      #  /ignore_ssl_tool

    6. Start the SecureCloud Agent service.

      # service scagentd start

To verify if the tool is launched correctly, check the config.xml under /var/lib/securecloud/config.xml.  The configuration should become “ignore_errors=True”.

For Windows platform

Apply ignore_ssl_tool before migration

Ignore ssl tool usage:

The tool will function only when the SCAgent service is stopped.

      1. Copy the ignore_ssl_tool.exe to SecureCloud folder.

        C:/Program Files/TrendMicro/SecureCloud/Agent/

      2. Go to Services > Stop Trend Micro SecureCloud Agent Service.
      3. Launch ignore_ssl_tool.exe.
      4. Go to Services > Start Trend Micro SecureCloud Agent Service.

To verify if the tool is launched correctly, check the config.xml under C:\Program Files\TrendMicro\SecureCloud\Agent. The configuration should become “ignore_errors=True”.

 

Only Data Volume Encrypted

For Linux platform

Copy the certificate key to the SecureCloud folder.

      1. Copy the file securecloud.com.pem to the agent certificate folder at /var/lib/SecureCloud/certs.
      2. Restart SecureCloud Agent service.

        # service scagentd restart

For Windows platform

Copy the certificate key to the SecureCloud folder

        1. Copy the file securecloud.com.pem to the agent certificate folder at C:\Program Files\Trend Micro\SecureCloud\Agent\certs.
        2. Go to Services > Trend Micro SecureCloud Agent Services and then right click on Restart to restart the SecureCloud agent.

 

Only Data Volume Encrypted

For Linux platform

Copy the certificate key to the SecureCloud folder.

  1. Copy the file securecloud.com.pem to the agent certificate folder at /var/lib/SecureCloud/certs.
  2. Restart SecureCloud Agent service.

    # service scagentd restart

For Windows platform

Copy the certificate key to the SecureCloud folder.

  1. Copy the file securecloud.com.pem to the agent certificate folder at C:\Program Files\Trend Micro\SecureCloud\Agent\certs.
  2. Go to Services > Trend Micro SecureCloud Agent Services. Right click on Restart to restart the SecureCloud.
Premium
Internal
Rating:
Category:
Configure; Upgrade
Solution Id:
1113594
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.