About scanning the SSL connectionsSSL (Secure Sockets Layer)
is a secure client-server connection protocol. SSL
uses digital certificates for identifying hosts, supports data encryption, and ensures data integrity.
Hackers are able to distribute malware using the protocol.
scans secure SSL
connections using an installed Kaspersky Lab
How to enable SSL connection scan
- Open Kaspersky Anti-Virus configuration screen.
- Select Network in the left list.
- Enable the option Scan encrypted connections in the Encrypted connections section and click the button Install certificate.
The certificate will be automatically installed in Internet Explorer. You can manually install the certificate in Mozilla Firefox and Opera.
Kaspersky Lab certificate file location on hard disk
Kaspersky Lab certificate file is named (fake)Kaspersky Anti-Virus personal root certificate.cer
Its location is:
- Windows 2000 / XP - %AllUsersProfile%\Application Data\Kaspersky Lab\AVP60MP4\Data\Cert\.
- Windows Vista / 7 - %AllUsersProfile%\Kaspersky Lab\AVP60MP4\Data\Cert\.
Why an encrypted SSL connection cannot be established sometimes Kaspersky Anti-Virus
scans encrypted connections by substituting a requested security certificate
with the self-signed
one. Some applications that initiate a connection reject the certificate, therefore failing to establish the connection.
We recommend disabling the encrypted connection scan in the following cases:
- When it is critical to have a genuinity confirmation, e.g.for web banking.
- When the application that initiates the connection verifies the requested website's certificate. MSN Messenger, for example.