How to change the certificate that used by Cayosoft Guardian

Overview

Cayosoft Guardian creates its own self-signed certificate during installation.

This article describes how to change this default certificate to a custom one using netsh commands for HTTP.

Open the Cayosoft Guardian Web Portal.
Expand Settings node.
Click on the Service Settings.
Select Network Settings.
Press Properties.
On the General tab, click on the pencil icon next to the SSL certificate label.
Select a certificate and press Select.
Now, you can go back to Service Settings and press Restart service.

Run PowerShell ISE or PowerShell command prompt as an administrator from the system Start menu.
Run the command below to check if 443 port has already bounded a certificate:
```
netsh http show sslcert
```
If the command above returned a record with IP:port = 0.0.0.0:443 you need to delete the old certificate:
```
netsh http delete sslcert ipport=0.0.0.0:443
```
Bind the new certificate to 443 port:
```
netsh http add sslcert ipport=0.0.0.0:443 certhash="<certificate thumbprint>" appid="{<application guid>}"
```
where
<certificate thumbprint> is your custom certificate thumbprint which you can find on the properties of the certificate;
<application guide> is the GUID of the owning application. You can use the same guid that was returned by netsh http show sslcert command.

Example:
```
netsh http add sslcert ipport=0.0.0.0:443 certhash="831C11EF1D8886A0B3D0A598A035421C057EC279" appid="{c657b8fb-3f15-48f4-8b35-903b2603041c}"
```