Steps to Enable SSL Certificate for BDRSuite Server

Unlocking Secure Connections: How to Enable SSL Certificates for BDRSuite Server

KB ID: 310003
Notes
Note: These instructions assume that you have already created your certificate and key files.
BDRSuite Backup Server - Windows:    
Step 1: Rename Existing Files
Navigate to the following location and rename the existing files:
  • Location:
    <BDRSuite_Installation_location>\apache\conf\ssl
    Example: C:\Program Files\Vembu\VembuBDR\apache\conf\ssl
  • File Rename:
    • HttpsSSL.crt → HttpsSSL_old.crt
    • HttpsSSL.key → HttpsSSL_old.key
Step 2: Rename SSL Certificate Files
  • Rename the new SSL certificate files:
    • <filename>.crt → HttpsSSL.crt
    • <filename>.key → HttpsSSL.key
  • Move the renamed certificate files to:
    • Location: <BDRSuite_Installation_location>\apache\conf\ssl
      Example: C:\Program Files\Vembu\VembuBDR\apache\conf\ssl
Step 3: Update Root Certificate
  1. Copy content from:
    <domaincertficatepath>/ca.crt
  2. Paste into:
    <BDRInstallationLocation>\VembuBDR\apache\cacert.pem
Step 4: Restart Services
Restart the following services:
  • BDRSuite WebServer
  • BDRSuite Backup Server Microsoft 365
  • BDRSuite Backup Server Google Workspace
  • BDRSuite_Backup_Server_Cloud_Workloads
  • BDRSuite_WebService_Cloud_Workloads
Step 5: Test the Updated Settings
  1. Access via Domain Name
    • Browsers may show warnings for localhost or 127.0.0.1 as SSL certs don't cover these.
    • To test:
      • Ensure your domain is correctly mapped in DNS, or
      • Add a temporary host entry mapping domain to server IP.
  2. Access URL Example:
    https://<Your Domain Name (or) Hostname (or) IPAddress>:6061
Example: https://vembu.com:6061
Launch HTTPS Web Console from Vembu BDR Tray (Windows Only — v8.1.0+)
  1. Edit SGTrayBranding.conf:
    • Location: <BDRSuite_Installation_location>/Vembu/VembuBDR/conf/SGTrayBranding.conf
    • Update:
      • WCProtocol = HTTPS
      • DomainName = your SSL domain
  2. Edit config.inc:
    • Location: <BDRSuite_Installation_location>/Vembu/VembuBDR/htmlgui/conf/config.inc
    • Update: $SG_HTTPS = 1 (from 0)
After changes, HTTPS web console will load by default.

BDRSuite Backup Server - Linux:
Step 1: Rename Existing Files
Navigate to and rename the files:
  • Location: <BDRSuite_Installation_location>/sgchroot/apache/conf
    Example: /home/vembubdr/Vembu/VembuBDR/sgchroot/apache/conf
  • File Rename:
    • HttpSSL.crt → HttpSSL_old.crt
    • HttpSSL.key → HttpSSL_old.key
Step 2: Rename SSL Certificate Files
  • Rename:
    • <filename>.crt → HttpSSL.crt
    • <filename>.key → HttpSSL.key
  • Move files to:
    • Location: <BDRSuite_Installation_location>/sgchroot/apache/conf
      Example: /home/vembubdr/Vembu/VembuBDR/sgchroot/apache/conf
Step 3: Update Root Certificate
  1. Copy content from:
    <domaincertficatepath>/ca.crt
  2. Paste into:
    <BDR_Installation_Location>/sgchroot/php/cacert.pem
    Example: /home/vembubdr/Vembu/VembuBDR/sgchroot/php/cacert.pem
Step 4: Restart Services
Run the following commands:
/usr/sbin/chroot sgchroot /apache/bin/httpd -k restart
systemctl restart BDRSuite_Backup_Server_Google_Workspace.service
systemctl restart BDRSuite_Backup_Server_Microsoft_365.service
systemctl restart BDRSuite_Backup_Server_Cloud_Workloads.service
systemctl restart BDRSuite_WebService_Cloud_Workloads.service
Step 5: Test the Updated Settings
  1. Access via Domain Name
    • Certificate warnings may appear on localhost or IPs.
    • Ensure:
      • Domain is set up in DNS, or
      • Add a host entry mapping your domain to the server IP.
  2. Access URL Example:
    https://<Your Domain Name (or) Hostname (or) IPAddress>:6061
Example: https://vembu.com:6061
By following these steps, you can successfully apply an SSL certificate to your BDRSuite Backup Server and Offsite DR Server, enhancing the security of your environment.



    • Related Articles

    • Applying SSL Certificate to BDRSuite Backup Server & Offsite DR Server

      KB ID: 115039 Problem Description: This knowledge base article provides a step-by-step guide to help users apply an SSL certificate to the BDRSuite Backup Server and Offsite DR Server. Solution: Note: These instructions assume that you have already ...

    • Steps to enable Google Workspace users to initiate Self-service Recovery from BDRSuite

      KB ID : 310005 BDRSuite's Self-service Recovery option allows Google Workspace Organization users to directly restore their backup data from the BDRSuite web console using the Google account credentials. Users can view their backup information and ...

    • Backup aborted

      KB ID: 101005 Product: BDRSuite Backup Server Cause This will occur due to the following reasons: Backup configuration stored in the server and client is incompatible. When the Backup storage location is inaccessible to the backup server. If you ...

    • Error: Multiple Connections to Server or Shared Resource Not Allowed

      KB ID: 115060 Error Message "Multiple connections to a server or shared resource by the same user, using more than one user name, are not allowed. Disconnect all previous connections to the server or shared resource and try again." Issue: The above ...

    • Deploy BDRSuite Backup Server on Linux(Ubuntu)

      In this section, we will guide you through the step-by-step process of installing the BDRSuite Backup Server in a standalone deployment specifically for the Linux operating system. Check the BDRSuite Backup Server Installation on Linux Download ...