Configuring trusted connection on Kaspersky Sandbox side

To configure a trusted connection, generate or upload a TLS certificate in Kaspersky Sandbox, save it on a computer, and then download it to Kaspersky Endpoint Agent.

To generate a TLS certificate for connecting Kaspersky Sandbox and Kaspersky Endpoint Agent:

In Kaspersky Sandbox web interface window, select the TLS certificates section.
In the TLS certificate for connecting to Kaspersky Endpoint Agent section, click the Generate button.
The action confirmation window opens.
Click Yes.

Kaspersky Sandbox will generate a new TLS certificate. The browser page will automatically refresh.

You can prepare the TLS certificate and upload it via the Kaspersky Sandbox web interface.

The TLS certificate file must satisfy the following requirements:

The file must contain the certificate itself and a private encryption key for the connection.
The file must be in PEM or DER format.
The private key length must be 2048 bits or longer.

For more details about preparing TLS certificates for import, refer to OpenSSL documentation.

To upload the TLS certificate using the Kaspersky Sandbox web interface:

In Kaspersky Sandbox web interface window, select the TLS certificates section.
In the TLS certificate for connecting to Kaspersky Endpoint Agent section, click the Upload button.
The file selection window will open.
Select the TLS certificate file that you want to upload and click Open.
The file selection window will close.

The TLS certificate has been added to Kaspersky Sandbox.

To save the TLS certificate file to connect to Kaspersky Endpoint Agent on a computer:

In Kaspersky Sandbox web interface window, select the TLS certificates section.
In the TLS certificate for connecting to Kaspersky Endpoint Agent section, click the Download button.

The TLS certificate file will be saved in the Downloads folder of the browser.