About the reserve certificate for connecting Kaspersky Thin Client to Kaspersky Security Center
To connect to Kaspersky Security Center, Kaspersky Thin Client uses a mobile certificate of the Kaspersky Security Center Administration Server. This mobile certificate is created by using the Administration Server quick start wizard after installing Kaspersky Security Center. The default validity period of an issued certificate is one year. When connecting to Kaspersky Security Center, Kaspersky Thin Client checks the validity of the certificate. If necessary, you can issue a new (reserve) mobile certificate or configure a rule for issuing certificates. For details on creating a new mobile certificate for the Kaspersky Security Center Administration Server, see the Working with certificates of mobile devices section and the Reissuing the Web Server certificate section of the Kaspersky Security Center Online Help Guide. For details on configuring rules for issuing certificates, see the Configuring certificate issuance rules section of the Kaspersky Security Center Online Help Guide.
Managed devices and devices included in an administration group will receive the new (reserve) certificate for connecting Kaspersky Thin Client to Kaspersky Security Center after Kaspersky Thin Client synchronizes with Kaspersky Security Center. The new (reserve) certificate will be saved in the Kaspersky Thin Client certificate store and will be used to connect thin clients to Kaspersky Security Center when the currently used certificate expires.
You can also issue a user certificate for connecting Kaspersky Thin Client to Kaspersky Security Center. In this case, the created user certificate must be uploaded to the Web Console as the mobile certificate. For detailed information about the requirements applied to Kaspersky Security Center user certificates, see the Requirements for custom certificates used in Kaspersky Security Center section in the Kaspersky Security Center Online Help Guide.
