How to add or change a web interface certificate in Kaspersky Secure Mail Gateway

The article concerns Kaspersky Secure Mail Gateway 1.1 Service Pack 1 Maintenance Release 3 (version 1.1.2.30).

To add or change a web interface certificate:

1. Copy new files in the CRT and KEY formats to the KSMG server. For example, to the /etc/httpd/conf.d/ folder.
2. Connect to Kaspersky Secure Mail Gateway via SSH and select Technical support mode.
3. Edit the /etc/httpd/conf.d/ssl.conf file. Change the lines and specify the path to the new files:
   • SSLCertificateFile /etc/httpd/conf.d/.klms-appliance.crt
   • SSLCertificateKeyFile /etc/httpd/conf.d/.klms-appliance.key
4. Restart the httpd service.

The web interface certificate will be added or changed.