Seqrite Endpoint Protection 8.5 by default supports self-sign certificates. Now, there is a provision to replace the public key certificate if a customer has it. This enhancement lets you replace the custom certificate. It can be done more than once.

Prerequisite
Ensure that you have the application.keystore file and the corresponding password readily available.

Replacing the Custom Certificates

Follow these steps to replace the SSL certificate on the machine:

1. Stop the EPP WildFly service.
2. Back up the existing keystore (application.keystore).
• Back up the keystore from: \Seqrite\EndpointProtection\Admin\wildfly\standalone\configuration
3. Replace it with the customer-provided keystore and rename it application.keystore.
4. If the keystore password changed, update it in standalone.xml (2 occurrences). Reference: < credential-reference clear-text="CUSTOMER_PASSWORD"/ >
5. Start the EPP WildFly service.

Note: Ensure that Self Protection is disabled for performing these actions.