lansweeper-server-communication self-signed certificate for LsAgent

[Xalyf]

When you install Lansweeper, a self-signed certificate with a one-year validity period is created in the "C:\Program Files (x86)\Lansweeper\Service\certificates" folder. When updating Lansweeper, the certificates are not updated. This raises questions. If the certificate expires, will LsAgent continue to work correctly? Can I take a certificate from a clean new installation of Lansweeper and simply replace it in the old installation by copying it? Is the password for this certificate empty? Can I generate my own certificate and simply replace the current certificate by copying it? Has anyone encountered issues with network traffic security systems due to a self-signed certificate?

[MikeAtMI]

We run lansweeper on IIS, so we have full control of the SSL certificate. It is worth the small amount of extra effort to set up IIS instead of using IIS Express. I have not checked recently, but I am guessing the default install still uses IIS Express

[ThoKl]

You can use the included IIS Express with your own certificate, it's a very simple process

Configure SSL in IIS Express - Lansweeper Community 

[MikeAtMI]

Thanks for the info! IIS requires the lowest cognitive load at our shop, since it is common for us to use IIS. IIS Express is uncommon for us, so I am not very familiar with its use.

[Xalyf]

Tested. From a clean installation of Lansweeper of the same version, I took a fresh certificate (two files) and replaced it with a simple copy. Success - LsAgent worked properly and transmitted the data to Lansweeper.

The certificate password is not empty. You cannot replace it with your own certificate. Network traffic security systems will respond to a self-signed certificate.

What do you think about this?