Configuring the trusted connection on the Kaspersky Sandbox side

To configure a trusted connection, you must generate or upload a TLS certificate in Kaspersky Sandbox, save it on a computer, and then upload it to the Kaspersky Endpoint Agent application.

To generate a TLS certificate for the connection of Kaspersky Sandbox with Kaspersky Endpoint Agent:

In the window of the Kaspersky Sandbox web interface, select the TLS certificates section.
In the TLS certificate for the connection with Kaspersky Endpoint Agent section, click Generate.
The action confirmation window opens.
Click Yes

Kaspersky Sandbox generates a new TLS certificate. The page is automatically refreshed.

You can choose to prepare the TLS certificate on your own and upload it using the Kaspersky Sandbox web interface.

The TLS certificate file prepared for upload must satisfy the following requirements:

The file must contain the certificate itself and a private encryption key for the connection.
The file must be in PEM format.
The private key length must be 2048 bits or longer.

For more details on preparing TLS certificates for import, please refer to the documentation on Open SSL.

To upload the TLS certificate using the Kaspersky Sandbox web interface:

In the window of the Kaspersky Sandbox web interface, select the TLS certificates section.
In the TLS certificate for the connection with Kaspersky Endpoint Agent section, click Upload.
The file selection window opens.
Select a TLS certificate file to download and click the Open button.
The file selection window closes.

The TLS certificate is added to Kaspersky Sandbox.

To save the file of the TLS certificate for the connection with Kaspersky Endpoint Agent on your computer:

In the window of the Kaspersky Sandbox web interface, select the TLS certificates section.
In the TLS certificate for the connection with Kaspersky Endpoint Agent section, click Download.

The TLS certificate file is saved in the downloads folder of the browser.