How to change certificate used by Cayosoft Guardian

Cayosoft Guardian creates its own self-signed certificate during installation. This article describes how to change this default certificate to a custom one using netsh commands for HTTP.

How to change the certificate in Cayosoft Guardian web portal

1. Open the Cayosoft Guardian web portal.
2. Expand Settings node.
3. Click the Service Settings.
4. Select Network Settings.
5. Click Properties.
6. On the General tab, click the edit icon next to the SSL certificate label.
7. Select a certificate and click Select.
8. Go back to Service Settings and press Restart service.
    

How to change the certificate with PowerShell

1. Run an elevated PowerShell ISE or PowerShell command prompt.

2. Run the following command to check if the port 443 already has a bound certificate:

   Copy

   netsh http show sslcert

   If the command above returned a record with IP:port = 0.0.0.0:443, you need to delete the old certificate:

   Copy

   netsh http delete sslcert ipport=0.0.0.0:443

3. Bind the new certificate to 443 port:
   

   Copy

   netsh http add sslcert ipport=0.0.0.0:443 certhash="<certificate thumbprint>" appid="{<application guid>}"

Replace <certificate thumbprint> with your custom certificate thumbprint found in the properties of the certificate. Replace <application guid> with the GUID of the bound application. You can use the same GUID that was returned by the netsh http show sslcert command. Refer to the following example:

netsh http add sslcert ipport=0.0.0.0:443 certhash="831C11EF1D8886A0B3D0A598