How to renew certificate for mobile devices [KSC for Windows]

[Antipova Anna]

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials.

Description and cautions

To replace the expiring certificate for mobile devices, you need to create a reserve certificate manually!

There is a problem with updating the certificate for mobile devices for KSC. So-as a mechanism for issuing a reserve certificate, which should replace the main one after its expiration.

If there is an automatic procedure for creating and replacing an expiring certificate for the main KSC server certificate (klserver.cer), then for mobile devices the issue of a reserve certificate (klsrvmob.cer2) must be issuing manually.

Details

This is a simple procedure:

1) Open Administration Server properties

2) Select "Administration Server connection settings → Certificates"

3) Check the date when the current certificate expires. 

4) Press "Reissue..." button and select "After this period expires" option.

5) Enter the number of days after which the new certificate will be applied. We recommend choosing at least 30 days so that all devices have time to contact the server and get a new certificate.

6) An additional field should appear in which the new certificate and the date of its application will be indicated.

7) Additionally, you can check that the certificate was created in the directory "C:\ProgramData\KasperskyLab\adminkit\1093\cert"

You can also create a reserve certificate via the command line, using the klsetsrvcert utility with "-t MR" option for generate reserve certificate and "-f DD-MM-YYYY hh:mm"  to specify the date of application of the new certificate.