Configuring the web server
Operation of the Kaspersky IoT Secure Gateway 1000 web interface is supported by a CivetWeb web server. Web server settings are stored in a configuration file, connection security is ensured by the web server certificate. Kaspersky IoT Secure Gateway 1000 is delivered with a predefined web server certificate signed by Kaspersky.
You have to update the web server certificates in the following cases:
- Current certificates have been compromised.
- The IP address of Kaspersky IoT Secure Gateway 1000 has changed.
After the first connection, replace the web server certificate installed by default with the certificate used in your organization.
To upload a new web server certificate:
- In the menu in the left part of the web interface page, select Users → Web server settings.
A page opens showing the information about the certificate and web server key.
- Do one of the following:
- If you have not added a certificate, click Upload certificate.
- If you have already added a certificate and want to replace it, click the pencil icon
in the upper right corner of the certificate information section.
- In the Upload web server certificate window that opens, do the following:
- In the Certificate field, click the Select certificate button, and in the download window that opens, select the certificate file in the CRT, CER, DER, or PEM format.
Make sure that when the web server certificate is generated, the Kaspersky IoT Secure Gateway 1000 IP address in the local network is specified as the value of the subjAltName parameter.
- In the Certificate key field, click the Select a certificate key button, and in the download window that opens, select the key file in the KEY format.
- Click Save to save the changes.
The total size of uploaded files cannot exceed 16 KB. If you need to upload multiple files whose total size is larger than 16 KB, we recommend uploading one at a time and saving the changes after each file.
- In the Certificate field, click the Select certificate button, and in the download window that opens, select the certificate file in the CRT, CER, DER, or PEM format.
- Refresh the page for the new certificate to take effect.
If you have already uploaded the certificate and key, they are replaced.
In the Users → Web server settings section, the following information about the certificate used is displayed:
- Certificate file name and its format.
- Subject name – information about the application for which the certificate is issued.
- Issuer – information about the organization that issued the certificate.
- Certificate validity period – certificate expiration date.