Renew Ahsay Self-Signed SSL and CA Certificates on AhsayCBS

Article ID

5010

Last Reviewed Date

Product Version

AhsayCBS: 7.5 or above

Operating System

All Platforms

Description

This Know-How article contains instructions on how to renew the expiring Ahsay self-signed SSL and CA certificate on your AhsayCBS v7, v8 and v9 backup server.

The Ahsay default self-signed SSL Certificate or Dummy SSL Certificate on AhsayCBS will expire on January 3, 2024 while the CA Certificate will expire on April 1, 2024. If the Ahsay default self-signed SSL and CA certificates are not renewed before the expiry date:

  1. No AhsayOBM/AhsayACB clients will be able to login to AhsayCBS server using https protocol.
  2. Auto Update, Scheduled and Continuous backups on AhsayOBM/AhsayACB clients using https protocol will stop working.

This article only applies if you are using the Ahsay default self-signed SSL and CA Certificate or Dummy SSL Certificate ("Not Secure - Ahsay System Corporation Limited") that came pre-installed with AhsayCBS and you are not using an SSL and CA Certificate purchased from a CA.

AhsayOBM/AhsayACB clients using pre-9.7.2.0 version will not be able to connect to AhsayCBS once the new SSL and CA certificates are applied.

Assumptions:

AhsayCBS default installation path: %CBS_INSTALL_PATH%

  • Windows: C:\Program Files\AhsayCBS
  • Linux: /usr/local/cbs
  • AhsayUBS: /ubs/mnt/eslsfw/obsr
The installation path may be different for branded AhsayCBS servers.

Solution

To renew the expiring Ahsay self-signed SSL and CA certificates:

  1. Upgrade all AhsayCBS, AhsayOBM and AhsayACB to v9.7.2.0 or above.
  2. Create a backup of your existing certificate files: ca.crt, ssl.crt and ssl.key.
  3. Download the updated Ahsay self-signed SSL and CA certificates.
  4. Unzip the SSL certificate files.
  5. Stop your AhsayCBS service. (Please verify that there are no active backup jobs running before stopping the service)

  6. Copy the new SSL certificate files to:

    • For servers in Windows and Linux: %CBS_INSTALL_PATH%\conf folder.
    • For servers using UBS: %CBS_INSTALL_PATH%\system\conf folder.
  7. Start the AhsayCBS service.
  8. Open a web browser with your AhsayCBS server URL and verify the new SSL certificate expiry date is November 1, 2028 and November 2, 2053 for the new CA certificate.