Managing certificates through the Web Console

You can view the previously uploaded root certificate and Kaspersky Security Center Administration Server certificate, and update these through the Web Console.

Loading widely known Certification Authority certificates is not recommended, as all servers that use certificates signed by these Certification Authority certificates will be trusted. This situation can lead to Kaspersky IoT Secure Gateway 1000 being compromised.

The correct valid certificate file must be uploaded. Uploading the wrong certificate file may result in the device becoming inoperable.

To upload or update the Kaspersky IoT Secure Gateway 1000 root certificate through the Web Console:

1. In the main window of the Web Console, select Devices → Managed devices.
2. Click the name of the device running Kaspersky IoT Secure Gateway 1000. If the device name is not on the list, add it to the Managed devices group.
3. In the device properties window that opens, select the Applications tab.
4. Press Kaspersky IoT Secure Gateway.

   This opens a window containing information about Kaspersky IoT Secure Gateway 1000.

5. Select the Application settings tab.
6. Select Settings → Certificates.

   A window will be displayed containing information about the root certificate and the Kaspersky Security Center Administration Server certificate if loaded.

7. If you need to add a new root certificate, click Upload in the Root certificate section and select the certificate file in the window that opens. Only files in CRT, PEM, DER, or CER format can be added as a certificate.

   The root certificate will be uploaded to the system.

8. If you have an uploaded root certificate and need to update it, in the Root certificate section, click Update and select the certificate file in the window that opens. Only files in CRT, PEM, DER, or CER format can be added as a certificate.

   The new root certificate will upload to the system and the previously uploaded certificate will be deleted.

   Kaspersky IoT Secure Gateway 1000 does not let you delete a root certificate without replacing the certificate with a new one.

9. Click Save in the lower part of the window to save the changes.

To upload or renew the Kaspersky Security Center Administration Server certificate through the Web Console:

1. In the main window of the Web Console, select Devices → Managed devices.
2. Click the name of the device running Kaspersky IoT Secure Gateway 1000. If the device name is not on the list, add it to the Managed devices group.
3. In the device properties window that opens, select the Applications tab.
4. Press Kaspersky IoT Secure Gateway.

   This opens a window containing information about Kaspersky IoT Secure Gateway 1000.

5. Select the Application settings tab.
6. Select Settings → Certificates.

   A window will be displayed containing information about the administrator certificate and the Kaspersky Security Center Administration Server certificate if loaded.

   If a new certificate was issued for the Kaspersky Security Center Administration Server, the connection that was previously established between Kaspersky IoT Secure Gateway 1000 and Kaspersky Security Center will be terminated. To resume the connection, you need to add the newly issued certificate as a Kaspersky Security Center Administration Server certificate in the Kaspersky IoT Secure Gateway 1000 web interface.

7. If you need to upload a new administrator certificate, click Upload in the KSC server certificate subsection and select the certificate file in the window that opens. Only files in CRT, PEM, DER, or CER format can be added as a certificate.

   The Kaspersky Security Center Administration Server certificate will be uploaded to the system.

8. If you have an uploaded administrator certificate and you need to update it, in the KSC server certificate subsection, click Update and select the certificate file in the window that opens. Only files in CRT, PEM, DER, or CER format can be added as a certificate.

   The new Kaspersky Security Center Administration Server certificate will be uploaded to the system and the previously uploaded certificate will be deleted.

   Kaspersky IoT Secure Gateway 1000 prevents deleting a Kaspersky Security Center Administration Server certificate without replacing the certificate with a new one.

9. Click Save in the lower part of the window to save the changes.