3 changing the acronis access tomcat ssl ciphers, Changing the acronis access tomcat ssl ciphers – Acronis Access - Installation Guide User Manual

Page 112

112

Note: If you are importing a PFX file, you will need to change the file filter to “Personal Information
Exchange (*.pfx, *.p12)” to display it.

14. If the certificate has a password, type the password on the Password page, and then click Next.
15. Check the following boxes:

a. Mark this key as exportable
b. Include all extended properties

16. On the Certificate Store page, click Place all certificates in the following store, and then click

Next.

17. Click Finish, and then click OK to confirm that the import was successful.

All of the certificates successfully installed in the Windows Certificate Store will be available when
using the Acronis Access Configuration Utility.

Configure Acronis Access to use your certificate

After you've successfully installed your certificate to your certificate store, you have to configure
Acronis Access to use that certificate.

1. Launch the Acronis Access Configuration Utility.

Note: Located in C:\Program Files (x86)\Acronis\Access\Configuration Utility by default.

2. Select your certificate from the Certificate selector on the Gateway Server and Access Server

tabs.

3. Click Apply.

The web services will restart and after about a minute they should be running with your certificate.

10.3 Changing the Acronis Access Tomcat SSL Ciphers

Changing the ciphers:

This procedure is necessary only if you wish to use a custom set of SSL ciphers. You might want to do
so to support the web interface on Internet Explorer 8 or the Acronis Access Desktop client on
Windows XP but It is not recommended. Changing the ciphers might expose your server to
vulnerabilities and is generally unsecure.

1. Navigate to your Acronis Access Tomcat installation folder (e.g. C:\Program Files

(x86)\Acronis\Access\Common\apache-tomcat-7.0.55\conf).

2. Make a copy of your server.xml file before editing it.
3. Open the server.xml file.
4. Find this line: SSLCipherSuite=""
5. Replace the contents between the two quotation marks with the ciphers you wish to use.

Note: If you wish to support an unsecure version of Internet Explorer 8 or the Acronis Access Desktop client
on Windows XP, enter the following:

ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM

e.g.:
SSLCipherSuite="ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM"

This manual is related to the following products:

Access - Administrator's Guide