You can choose to prepare the TLS certificate on your own and upload it using the Kaspersky Anti Targeted Attack Platform web interface.
The TLS certificate file prepared for upload must satisfy the following requirements:
For more details on preparing TLS certificates for import, please refer to the documentation on Open SSL.
If you want to prepare the TLS certificate of Kaspersky Endpoint Agent on your own, you must create a PFX cryptographic container with your certificate and upload the cryptographic container to Kaspersky Endpoint Agent.
You can use the cryotographic container to configure the validation of Kaspersky Endpoint Agent TLS certificate by the Central Node server when attempting to connect to Kaspersky Anti Targeted Attack Platform.
For details on managing TLS certificates, see the OpenSSL documentation.
The cryptographic container must contain only the certificate file, but not the private key file. Kaspersky Anti Targeted Attack Platform does not store private keys for the TLS encryption of the connection.
To upload an independently prepared TLS certificate of Kaspersky Endpoint Agent using the Kaspersky Anti Targeted Attack Platform web interface:
This opens the file selection window.
This closes the file selection window.
The TLS certificate is added to the Kaspersky Anti Targeted Attack Platform.