Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Changing the Web Console SSL Certificate in Endpoint Application Control (TMEAC)

    • Updated:
    • 24 May 2017
    • Product/Version:
    • Endpoint Application Control 2.0
    • Platform:
    • Windows All
Summary

Use this article to replace TMEAC Web Console's SSL Certificate with a custom or a third-party certificate.

 
This solution is applicable only to TMEAC WebUI running on Apache Web Server.
Details
Public

To change the TMEAC Web Console's SSL Certificate:

  1. Log in to the TMEAC Server and download the zipped ChangeServerCert batch file.
  2. Extract the ChangeServerCert batch file into a temporary folder.
  3. Copy the custom/third-party certificate files onto the same folder as the batch file.

    cert files

    Click image to enlarge

    Custom/third-party certificate files

    • custom-server.crt - The PEM or DER encoded certificate file ("Let's Encrypt" calls it "cert.pem").
    • custom-server.key - The PEM or DER encoded private key corresponding to the certificate ("Let's Encrypt" calls it "key.pem").
    • custom-server-ca-chain.crt - The PEM or DER encoded chain of certificates of the CA that signed the certificate file ("Let's Encrypt" calls it "chain.pem").
     

    If the files are not named like mentioned above or the install path of the TMEAC is different from the default path, edit the batch script accordingly:

    Click image to enlarge

  4. Open the command prompt with elevated privilege and change the current folder to where the batch script and certificate files are saved.
  5. Run the ChangeServerCert.bat file.

    Click image to enlarge

     

    The batch script writes a "PKCS12" file containing the contents of all 3 files and the certificate to use for SSL with the alias name "WebServerCert".

    The updated file is placed into "C:\Program Files (x86)\Trend Micro\Endpoint Application Control\SSLCerts\WebServerCert\WebServer_Cert.p12" and the existing file is saved beforehand (as *.backup file).

    Should anything go wrong, stop the AC Server service and restore the "backup" file by removing the ".backup" suffix.

  6. Verify the SSL Certificate of the WebUI.

    Click image to enlarge

Premium
Internal
Rating:
Category:
Configure
Solution Id:
1117435
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.