Configuring a trusted connection on the Kaspersky Sandbox server

To configure a trusted connection of Kaspersky Sandbox with Kaspersky Endpoint Agent, you must generate or upload a TLS certificate in Kaspersky Sandbox, save it on a computer, and then upload it to the Kaspersky Endpoint Agent application.

To generate a TLS certificate for the connection of Kaspersky Sandbox with Kaspersky Endpoint Agent:

In the Kaspersky Sandbox web interface window, select the TLS Certificates.
Under TLS certificate for Kaspersky Endpoint Agent connection, click Generate.
The action confirmation window opens.
Click Yes.

Kaspersky Sandbox generates a new TLS certificate. The browser page is automatically reloaded.

You can prepare the TLS certificate and upload it via the Kaspersky Sandbox web interface.

The uploaded TLS certificate file must satisfy the following requirements:

The file must contain the certificate itself and a private encryption key for the connection.
The file must be in PEM format.
The private key length must be 2048 bits or longer.

For more details about preparing TLS certificates for import, see the Open SSL documentation.

To upload the TLS certificate via the Kaspersky Sandbox web interface:

In the Kaspersky Sandbox web interface window, select the TLS Certificates.
Under TLS certificate for Kaspersky Endpoint Agent connection, click Upload.
The file selection window opens.
Select the TLS certificate file that you want to upload and click Open.
The file selection window closes.

The TLS certificate is added to Kaspersky Sandbox.

To save the TLS certificate file for the connection with Kaspersky Endpoint Agent on a computer:

In the Kaspersky Sandbox web interface window, select the TLS Certificates.
Under TLS certificate for Kaspersky Endpoint Agent connection, click Download.

The TLS certificate file is saved in the downloads folder of the browser.