Configuring trusted connection on Kaspersky Sandbox side

This Help provides information related to Kaspersky Endpoint Agent for Windows. This information may be partially or completely inapplicable to Kaspersky Endpoint Agent for Linux. For complete information about Kaspersky Endpoint Agent for Linux, please refer to the Help of the solution that includes the application: Kaspersky Anti Targeted Attack Platform or Kaspersky Managed Detection and Response.

To configure trusted connection, generate or upload a TLS certificate in Kaspersky Sandbox, save it on a computer, and then download it to Kaspersky Endpoint Agent.

To generate a TLS certificate for connecting Kaspersky Sandbox and Kaspersky Endpoint Agent:

1. In Kaspersky Sandbox web interface window, select the TLS certificates section.
2. In the TLS certificate for connecting to Kaspersky Endpoint Agent section click the Generate button.

   The action confirmation window opens.

3. Click Yes.

Kaspersky Sandbox generates a new TLS certificate. The browser page is automatically reloaded.

You can prepare the TLS certificate and upload it via Kaspersky Sandbox web interface.

The uploaded TLS certificate file must satisfy the following requirements:

• The file must contain the certificate itself and a private encryption key for the connection.
• The file must be in PEM format.
• The private key length must be 2048 bits or longer.

For more details about preparing TLS certificates for import, refer to OpenSSL documentation.

To upload the TLS certificate using Kaspersky Sandbox web interface:

1. In Kaspersky Sandbox web interface window, select the TLS certificates section.
2. In the TLS certificate for connecting to Kaspersky Endpoint Agent section click the Upload button.

   The file selection window opens.

3. Select the TLS certificate file that you want to upload and click Open.

   The file selection window closes.

The TLS certificate is added to Kaspersky Sandbox.

To save the TLS certificate file for connection to Kaspersky Endpoint Agent on a computer:

1. In Kaspersky Sandbox web interface window, select the TLS certificates section.
2. In the TLS certificate for connecting to Kaspersky Endpoint Agent section click the Download button.

The TLS certificate file is saved in the Downloads folder of the browser.

See also Configuring trusted connection on Kaspersky Endpoint Agent side Updating Kaspersky Sandbox TLS certificate data in Kaspersky Endpoint Agent

Page top