SSL Certificate Expiry vulnerability in Security Analytics

Products

• Security Analytics

Issue/Introduction

It is possible that if the SSL web certificate is expired on the Security Analytics appliance, security scans may flag the appliance for this vulnerability. 

Resolution

The expiration of the SSL certificate can be easily checked in any web browser by clicking the padlock at the beginning of the URL and looking for the expiration date. A new certificate can be uploaded by going to the Settings > Security page and looking for the PKI and SSL section.  Help pages for how to upload a custom certificate can be found in the documentation:  SSL Certificates and Keys