SecureCloud will be changing its certificate from SHA1 to SHA2 this August 2016.
Since the SecureCloud Agent contains only the SHA1 certificate, the validation of the certificate may fail after the SecureCloud server upgraded the SHA1 certificate to SHA2 certificate. As a result, the encrypted disks could not be mounted correctly.
Root Volume Encrypted
For Linux platform
Apply ignore_ssl_tool before migration.
Ignore ssl tool usage:
The tool will function only when the SCAgent service is stopped.
- Unzip ignore_ssl_tool.zip.
- Copy the ignore_ssl_tool in securecloud directory.
# cp ignore_ssl_tool /var/lib/securecloud/
- Add permission to the tool.
# chmod 755 ignore_ssl_tool
- Stop SecureCloud Agent service
% service scagentd stop
- Launch ignore ssl tool.
# /ignore_ssl_tool
- Start the SecureCloud Agent service.
# service scagentd start
To verify if the tool is launched correctly, check the config.xml under /var/lib/securecloud/config.xml. The configuration should become “ignore_errors=True”.
For Windows platform
Apply ignore_ssl_tool before migration
Ignore ssl tool usage:
The tool will function only when the SCAgent service is stopped.
- Copy the ignore_ssl_tool.exe to SecureCloud folder.
C:/Program Files/TrendMicro/SecureCloud/Agent/
- Go to Services > Stop Trend Micro SecureCloud Agent Service.
- Launch ignore_ssl_tool.exe.
- Go to Services > Start Trend Micro SecureCloud Agent Service.
To verify if the tool is launched correctly, check the config.xml under C:\Program Files\TrendMicro\SecureCloud\Agent. The configuration should become “ignore_errors=True”.
Only Data Volume Encrypted
For Linux platform
Copy the certificate key to the SecureCloud folder.
- Copy the file securecloud.com.pem to the agent certificate folder at /var/lib/SecureCloud/certs.
- Restart SecureCloud Agent service.
# service scagentd restart
For Windows platform
Copy the certificate key to the SecureCloud folder
- Copy the file securecloud.com.pem to the agent certificate folder at C:\Program Files\Trend Micro\SecureCloud\Agent\certs.
- Go to Services > Trend Micro SecureCloud Agent Services and then right click on Restart to restart the SecureCloud agent.
Only Data Volume Encrypted
For Linux platform
Copy the certificate key to the SecureCloud folder.
- Copy the file securecloud.com.pem to the agent certificate folder at /var/lib/SecureCloud/certs.
- Restart SecureCloud Agent service.
# service scagentd restart
For Windows platform
Copy the certificate key to the SecureCloud folder.
- Copy the file securecloud.com.pem to the agent certificate folder at C:\Program Files\Trend Micro\SecureCloud\Agent\certs.
- Go to Services > Trend Micro SecureCloud Agent Services. Right click on Restart to restart the SecureCloud.
