Did you check NW 9.1 Security Configuration Guide?  There are steps on handling certificates inside that doc...

Yes, only for ldaps is discussed in the security guide.

Vincent

Op 5 mrt. 2017 om 23:25 heeft ble > het volgende geschreven:

DECN

Networker 9.1 replace certificate

reply from Hrvoje Crvelin in NetWorker - View the full discussion

At that point, it might be good idea to open this with engineering and also request that docs are updated for future releases...

Already opened a service request about this issue.

Van: ble

Verzonden: Monday, March 6, 2017 11:42

Aan: Jansen, VRM (ict)

Onderwerp: Re: - Networker 9.1 replace certificate

DECN

Networker 9.1 replace certificate

reply from Hrvoje Crvelin in NetWorker - View the full discussion

Hey any one found a way to make Networker 9.1 communicate via HTTPS?

Have you tried this KB

https://support.emc.com/kb/496571

During an installation or upgrade to NetWorker 9.1.0.3 on a Windows 2k8 R2 server without internet access, the installation wizard reports a certificate error and doesn’t allow it to finish.   EMC Config Checker A file that is required cannot be installed because the cabinet file C:\ProgramData\Package Cache\{1FF1A0E0-17B9-4F8C-85BC-D782BC52E941}v9.1.0.3\cfgk1.cab has an invalid digital signature. This may indicate that the cabinet file is corrupt.
Cause	As the server has no internet connection or it has blocked the option to download specific files, the installation wizard is not able to download the new certificate and hence validate the installation package.
Resolution	To solve this issue, it is necessary to download and install the certificates attached to this KB. To install the certificates you have to follow this steps: Open Microsoft Certification Manager console - certmgr.msc Select "Trusted Root Certification Authorities" and press right click From "All Tasks" select "Import" Choose the cert file you have downloaded from this KB and install it with default values.                    Now the installation or upgrade should proceed without any issue.

Yah that's what I told the engineer.  I guess one of the biggest concerns

is that Java in itself isn't very secure and the engineer wanted to know if

there was a way we could configure https manually like in 9.2?  If not I

guess we will have to set a time to perform a code upgrade.  Let me know.

There is no need for https (I assume you talk about initial connection do download java applet).  As security guide states:

The http daemon on the NMC server downloads the Java client to the NMC client. You do not require a secure http (https) connection because only the Java client transfers information and performs authentication between the NMC server and NMC client. The NMC server contacts the NetWorker Authentication Service to validate the user log in credentials. When the NetWorker Authentication Service successfully validates the credentials, the application issues an authentication token for the user, to the NMC server. The NMC server caches the token.

I didn't test 9.2 so no idea how it is there...

For anyone who may still need help on this old thread, per Dell support: shut down GST service and replace server.crt and server.key with CA signed certificates (using the same file names) located in /opt/lgtonmc/apache/conf.  Make sure the new cert files are owned by nsrnmc, start GST service.