Self-Signed Cert on Scan Servers vs PKI

[argonvesher]

Hi all! Appreciate anyone looking into this!

We have 5 Scanning Servers for our LS environment. They have self-signed certs and we are looking to get them set with PKI certs. IS this able to be done? Both the Web Server and SQL Server have PKI certs but I don't see anything about the Scanning Servers, if this is even able to be done. I see information for the Web Server but nothing specific to the Scanning Servers.

Again, thanks in advance for any information!

[argonvesher]

Thank you for your response!

I had opened a case and think I received the info we actually need.

Thanks!

[Gilian]

Hi @argonvesher ,

The Lansweeper solution consists of minimum 3 components: scan server, DB server, web console. These can be run on the same machine or on different machines. If on different machines, they use unencrypted SQL TCP to contact the database. To enable encrypted communication on SQL server set “;Encrypt=True;TrustServerCertificate=True" in the connection string for both scan server and web console using the ConfigEditor tool and follow this article to set up the encryption on the SQL server side: Encrypt Connections by Importing a Certificate - SQL Server The web console does not directly contact the scan server(s), it uses the DB to pass instructions to the scan server(s).