Change certificate of RESTful-API

[dvzak]

Hi,

Is there a useful documentation or way to change the certificate of the RESTful API listening port 9419. I tried to adopt the documentation from Enterprise Manager, but with no luck.
https://helpcenter.veeam.com/docs/backu ... ml?ver=110

When i try to add the new certificate, netsh tells me 'wrong parameter'. I double checked the hash of the CA-signed certificate and appid. I use the cert for RDP as well as for Veeam Console. Works fine... What if done:
Get the appid:

Code: Select all

netsh http show sslcert ipport=0.0.0.0:9419

remove the old certificate:

Code: Select all

netsh http delete sslcert ipport=0.0.0.0:9419

try to set the new one:

Code: Select all

netsh http add sslcert ipport=0.0.0.0:9419 certhash=20389C8B334C4D66080313600A61C963476E080E appid={284175c4-aa3e-4c6f-a2dd-5a4c80552eb1}

To rebuild the RESTful-API I use the Veeam-setup to repair the installation.


thank you

[oleg.feoktistov]

Hi and welcome to the R&D forums,

The approach should be the same as in the EM API. Do you happen to try to add ssl certificate through PowerShell? If you do, make sure to wrap app id in single quotes. Otherwise, powershell will try to process app id as a powershell directive. In cmd it should work without quotes.

Thanks,
Oleg

[dvzak]

Hi Oleg,

Thats it! Good job.
Double quotes work in powershell and cmd. Just tested this. Maybe this could be changed in EM API documentation? Installing 3rd party Certificate in B&R RESTful-API is missing in documentation.

Code: Select all

netsh http add sslcert ipport=0.0.0.0:9419 certhash=20389C8B334C4D66080313600A61C963476E080E appid="{284175c4-aa3e-4c6f-a2dd-5a4c80552eb1}"

Kind regards
Arne

[oleg.feoktistov]

Yep, we updated the docs for EM REST API. For VBR REST the change will come a bit later. I'll follow-up on this thread as soon as it is available. Thanks!

[oleg.feoktistov]

Added SSL certificate section for VBR REST API. See this page. Thanks!