Configuring web server using the Web Console

Operation of the Kaspersky IoT Secure Gateway 1000 web interface is supported by a CivetWeb web server. Web server settings are stored in a configuration file, connection security is ensured by the web server certificate. Kaspersky IoT Secure Gateway 1000 is delivered with a predefined web server certificate signed by Kaspersky.

You can upload a new web server certificate and key using the Web Console.

If you did not replace the default web server certificate when connecting to the web interface of Kaspersky IoT Secure Gateway 1000 for the first time, you must replace the default web server certificate with the certificate used in your organization after your first connection to the Web Console.

To upload a new web server certificate:

1. In the main window of the Web Console, select Devices → Managed devices.
2. Click the name of the device running Kaspersky IoT Secure Gateway 1000. If the device name is not on the list, add it to the Managed devices group.
3. In the device properties window that opens, select the Applications tab.
4. Press Kaspersky IoT Secure Gateway.

   This opens a window containing information about Kaspersky IoT Secure Gateway 1000.

5. Select the Application settings tab.
6. Select Settings → Web server.
7. To upload a certificate, in the Web server certificate section, do one of the following:
   • If you have not added a certificate, click the Upload certificate button, and in the upload window that opens select the certificate file in the CRT, CER, DER, or PEM format.
   • If you have already added a certificate and want to replace it, click the Replace button, and in the upload window that opens select the certificate file in the CRT, CER, DER, or PEM format.

   The correct valid certificate file must be uploaded. Uploading the wrong certificate file may result in the device becoming inoperable.

8. To upload a certificate key, in the Certificate key subsection, do one of the following:
   • If you have not added a key, click the Upload key button and in the upload window that opens select the key file in the KEY format.
   • If you have already added a key and want to replace it, click the Replace button, and in the upload window that opens select the key file in the KEY format.
9. Click Save in the lower part of the page to save the changes.

In the Settings → Web server section, the following information about the used certificate and web server key is displayed.

• In the Web server certificate section:
  • File name – certificate file name and its format.
  • Subject name – information about the application for which the certificate is issued.
  • Issuer – information about the organization that issued the certificate.
  • Valid until – certificate expiration date and time.
• The Certificate key section displays File name: certificate key file name and format.