Search Results

Follow the steps below to remediate this finding on Nginx webserver. Obtain a certificate from a trusted CA. For Let's Encrypt, use Certbot:sudo apt install certbot python3-certbot-nginx sudo certbot --nginx -d yourdomain.comIn nginx.conf, configure:ssl_certif...

Follow the steps below to remediate this finding on Apache webserver. Obtain a certificate from a trusted CA. For Let's Encrypt:sudo apt install certbot python3-certbot-apache sudo certbot --apache -d yourdomain.comIn the Apache SSL VirtualHost, configure:SSLC...

Follow the steps below to remediate this finding on Plesk. In the Plesk control panel, navigate to Domains > your domain > SSL/TLS Certificates.Click the Let's Encrypt button to obtain a free trusted certificate, or click Add SSL/TLS Certificate to upload a ce...

Follow the steps below to remediate this finding on Microsoft IIS webserver. Renew the certificate before it expires.For certificates from a commercial CA, request a renewal from your CA portal and import the new certificate.In IIS Manager, go to Server Certif...

Follow the steps below to remediate this finding on Nginx webserver. If using Let's Encrypt with Certbot, renewal is automatic via a cron job or systemd timer:sudo certbot renew --dry-runIf renewal is not automatic, run:sudo certbot renewReload Nginx after ren...

Follow the steps below to remediate this finding on Apache webserver. If using Let's Encrypt with Certbot, renewal is automatic:sudo certbot renew --dry-runFor commercial certificates, obtain the renewed certificate and update:SSLCertificateFile /path/to/renew...

Follow the steps below to remediate this finding on Plesk. In the Plesk control panel, navigate to Domains > your domain > SSL/TLS Certificates.For Let's Encrypt certificates, Plesk renews them automatically. Verify that the auto-renewal task is enabled.For co...

Follow the steps below to remediate this finding on Microsoft IIS webserver. Replace the self-signed certificate with one issued by a trusted Certificate Authority.For internal services, deploy a certificate from your internal PKI (Active Directory Certificate...

Follow the steps below to remediate this finding on Nginx webserver. Replace the self-signed certificate with a CA-issued certificate.For Let's Encrypt (public-facing sites):sudo certbot --nginx -d yourdomain.comUpdate nginx.conf to reference the new certifica...