This knowledge base article provides a step-by-step guide to help users apply an SSL certificate to the BDRSuite Backup Server and Offsite DR Server. 

Note: These instructions assume that you have already created your certificate and key files.

BDRSuite Backup Server - Windows:    

Step 1: Rename Existing Files

Navigate to the following location and rename the existing files:

• Location:
  <BDRSuite_Installation_location>\apache\conf\ssl
  Example: C:\Program Files\Vembu\VembuBDR\apache\conf\ssl
• File Rename:
  • HttpsSSL.crt → HttpsSSL_old.crt
  • HttpsSSL.key → HttpsSSL_old.key

Step 2: Rename SSL Certificate Files

• Rename the new SSL certificate files:
  • <filename>.crt → HttpsSSL.crt
  • <filename>.key → HttpsSSL.key
• Move the renamed certificate files to:
  • Location: <BDRSuite_Installation_location>\apache\conf\ssl
    Example: C:\Program Files\Vembu\VembuBDR\apache\conf\ssl

Step 3: Update Root Certificate

1. Copy content from:
   <domaincertficatepath>/ca.crt
2. Paste into:
   <BDRInstallationLocation>\VembuBDR\apache\cacert.pem

Step 4: Restart Services

Restart the following services:

• BDRSuite WebServer
• BDRSuite Backup Server Microsoft 365
• BDRSuite Backup Server Google Workspace
• BDRSuite_Backup_Server_Cloud_Workloads
• BDRSuite_WebService_Cloud_Workloads

Step 5: Test the Updated Settings

1. Access via Domain Name
   • Browsers may show warnings for localhost or 127.0.0.1 as SSL certs don't cover these.
   • To test:
     • Ensure your domain is correctly mapped in DNS, or
     • Add a temporary host entry mapping domain to server IP.
2. Access URL Example:

   https://<Your Domain Name (or) Hostname (or) IPAddress>:6061
   Example: https://vembu.com:6061

Launch HTTPS Web Console from Vembu BDR Tray (Windows Only — v8.1.0+)

1. Edit SGTrayBranding.conf:
   • Location: <BDRSuite_Installation_location>/Vembu/VembuBDR/conf/SGTrayBranding.conf
   • Update:
     • WCProtocol = HTTPS
     • DomainName = your SSL domain
2. Edit config.inc:
   • Location: <BDRSuite_Installation_location>/Vembu/VembuBDR/htmlgui/conf/config.inc
   • Update: $SG_HTTPS = 1 (from 0)

After changes, HTTPS web console will load by default.

BDRSuite Backup Server - Linux:

Step 1: Rename Existing Files

Navigate to and rename the files:

• Location: <BDRSuite_Installation_location>/sgchroot/apache/conf
  Example: /home/vembubdr/Vembu/VembuBDR/sgchroot/apache/conf
• File Rename:
  • HttpSSL.crt → HttpSSL_old.crt
  • HttpSSL.key → HttpSSL_old.key

Step 2: Rename SSL Certificate Files

• Rename:
  • <filename>.crt → HttpSSL.crt
  • <filename>.key → HttpSSL.key
• Move files to:
  • Location: <BDRSuite_Installation_location>/sgchroot/apache/conf
    Example: /home/vembubdr/Vembu/VembuBDR/sgchroot/apache/conf

Step 3: Update Root Certificate

1. Copy content from:
   <domaincertficatepath>/ca.crt
2. Paste into:
   <BDR_Installation_Location>/sgchroot/php/cacert.pem
   Example: /home/vembubdr/Vembu/VembuBDR/sgchroot/php/cacert.pem

Step 4: Restart Services

Run the following commands:

/usr/sbin/chroot sgchroot /apache/bin/httpd -k restart
systemctl restart BDRSuite_Backup_Server_Google_Workspace.service
systemctl restart BDRSuite_Backup_Server_Microsoft_365.service
systemctl restart BDRSuite_Backup_Server_Cloud_Workloads.service
systemctl restart BDRSuite_WebService_Cloud_Workloads.service

Step 5: Test the Updated Settings

1. Access via Domain Name
   • Certificate warnings may appear on localhost or IPs.
   • Ensure:
     • Domain is set up in DNS, or
     • Add a host entry mapping your domain to the server IP.
2. Access URL Example:

   https://<Your Domain Name (or) Hostname (or) IPAddress>:6061
   Example: https://vembu.com:6061

By following these steps, you can successfully apply an SSL certificate to your BDRSuite Backup Server and Offsite DR Server, enhancing the security of your environment.