SSL certificate for port 41002 communication expired

Products

• Messaging Gateway

Issue/Introduction

You notice that the self-signed certificate for port 41002 communication on the  Symantec Messaging Gateway (SMG) expired.

Environment

10.7

Cause

The certificate is generated for two years from the update / installation date.

Resolution

The certificate is auto-regenerated on every update / installation.

 

Additional Information

An expired certificate will still encrypt communications and the only use for this certificate is to secure communication between the Control Center and the Scanners which is further protected by Access Control Lists(ACLs) within the agent config file.

We recommend that customers block port 41002 from outside access and allow only bi-directional communication between Control Center and Scanner.