Using your own SSL certificate

In this article, you will get information, on how to use your own SSL certificate in case of on-premise installation.

Using your own SSL certificate

In order to setup a certificate open appsettings.json file, which is located in GitProtect Management Service installation directory. It's a simple JSON file, which has to be modified.

Find comment_out_Kestrel section, which by default looks like this:

"commented_out_Kestrel": {
"Endpoints": {
"Http": {
"Url": "http://*:5000"
}
}

and modify it by erasing comment_out_ prefix and providing HTTPS configuration as below:

"Kestrel": {
"Endpoints": {
"Http": {
"Url": "http://*:5000"
},
"Https": {
"Url": "https://*:5001",
"Certificate":{
"Path": "<.pfx file path>",
"Password": "<certificate password>"
}}}}}

where:

1. Path - path to .pfx file (Remember to use double slash, so in case if you're keeping certificate in C:\cert.pfx directory provide the path in following way: C:\\cert.pfx)

2. Password - certificate password

More information about Kestrel configuration you can find here:

Configure endpoints for the ASP.NET Core Kestrel web serverdocsmsft

Once you'll set up the management service you need to switch agent communication to HTTPS. In order to do this you need to find config.json in the agent installation directory and change there protocol.

In case of change the IP address or change the protocol (http/https) etc. of Management Service the agent's status will change to Offline. To reconnect them, you just need to change one value in the configuration file. The config.json file is located by default in:

1. Windows: C:\Program Files\Xopero ONE Backup&Recovery Agent

2. Linux: /opt/XoperoONEBackupAgent/

You can edit config.json with a simple text editor. And change the ServiceUrl value to the new one.