Trying to install a cert for the Rapid Recovery Agent

Question

Has anyone had any success installing a certificate for the Rapid Recovery Agent? When I put in the thumbprint and restart the recovery service, it replaces the thumbprint I entered. I was following kb 117531. Any help would be appreciated. Thanks!

Tudor.Popescu · Answer

I installed an agent certificate a few times without facing any issues at all. In my case the customers had to use SHA-2 certificates while keeping AppAssure 5.4.3 agents. Basically I created a self signed certificate with an exportable key (won't work otherwise), copied it in the Certs Store on the Agent -- Trusted Root Certification Authority, enabled it specifically for all purposes and replaced the thumbprint in the Agent Registry. The idea is that when the agent starts up it checks the thumbprint in the Certificate store and if it finds it, it uses the certificate already there. Please note that you need to replace the Cert thumbprint for two reg key values (AppAssure/RapidRecovery can use two certificates if needed but you are fine with just one). The Agent protection needs to be repaired as the core has the old agent certs. If you are using an AppAssure 5.4.3 core, there is a patch that makes it understand SHA-2 certs. Just two caveats: 1. If you create your own cert, it will be placed most likely in your Personal Certs Store branch. You need to export it (including the key) and re-import it in the Trusted Root Certs Store. 2. If you install a Sha2 cert, the thumbprint is still sha1 -- this is normal as the thumbprint is used just in place of the cert name. Hope that this helps. Anyway, that is all that is to it. If you have some difficulties implementing the solution, please open a case with us.