How do I renew the Ahsay self-signed SSL and CA certificate on my AhsayCBS backup server?

How do I renew the Ahsay self-signed SSL and CA certificate on my AhsayCBS backup server?

Article ID
5010
Last Reviewed Date
Product Version
AhsayCBS: 7.5 or above
Operating System
All Platforms
Description

This Know-How article contains instructions on how to renew the expiring Ahsay self-signed SSL and CA certificate on your AhsayCBS v7, v8 and v9 backup server.

The Ahsay default self-signed SSL Certificate or Dummy SSL Certificate on AhsayCBS will expire on January 3, 2024 while the CA Certificate will expire on April 1, 2024. If the Ahsay default self-signed SSL and CA certificates are not renewed before the expiry date:

  1. No AhsayOBM/AhsayACB clients will be able to login to AhsayCBS server using https protocol.
  2. Auto Update, Scheduled and Continuous backups on AhsayOBM/AhsayACB clients using https protocol will stop working.

This article only applies if you are using the Ahsay default self-signed SSL and CA Certificate or Dummy SSL Certificate ("Not Secure - Ahsay System Corporation Limited") that came pre-installed with AhsayCBS and you are not using an SSL and CA Certificate purchased from a CA.

AhsayOBM/AhsayACB clients using pre-9.7.2.0 version will not be able to connect to AhsayCBS once the new SSL and CA certificates are applied.

Assumptions:

AhsayCBS default installation path: %CBS_INSTALL_PATH%

  • Windows: C:\Program Files\AhsayCBS
  • Linux: /usr/local/cbs
  • AhsayUBS: /ubs/mnt/eslsfw/obsr
The installation path may be different for branded AhsayCBS servers.
Solution

To renew the expiring Ahsay self-signed SSL and CA certificates:

  1. Upgrade all AhsayCBS, AhsayOBM and AhsayACB to v9.7.2.0 or above.
  2. Create a backup of your existing certificate files: ca.crt, ssl.crt and ssl.key.
  3. Download the updated Ahsay self-signed SSL and CA certificates.
  4. Unzip the SSL certificate files.
  5. Stop your AhsayCBS service. (Please verify that there are no active backup jobs running before stopping the service)

  6. Copy the new SSL certificate files to:

    • For servers in Windows and Linux: %CBS_INSTALL_PATH%\conf folder.
    • For servers using UBS: %CBS_INSTALL_PATH%\system\conf folder.
  7. Start the AhsayCBS service.
  8. Open a web browser with your AhsayCBS server URL and verify the new SSL certificate expiry date is November 1, 2028 and November 2, 2053 for the new CA certificate.