Skip to main content
Version: Developer

Replacing Self-Signed Certificates

During installation, the system creates self-signed certificates that are used when connecting to the Web UI.
Administrators may wish to replace these with valid, trusted certificates for the domain Kasm is to be published on.
An alternative is to place Kasm Server behind a self-managed reverse proxy such as Nginx or Caddy. See the
Reverse Proxy documentation for more details on this configuration.

Acquiring valid certificates is outside the scope of this document, but once acquired, the following steps may be used
to replace Kasm's self signed certificates. The certificate and key must be in PEM format.

Note

  For multi-server installations, repeat the following steps on each Web App role.

Steps to Replace Certificates​

  1. Stop the Kasm Services.

    sudo systemctl stop kasm

  2. Replace kasm_nginx.crt and kasm_nginx.key files.

    sudo cp <your_cert> /opt/kasm/current/certs/kasm_nginx.crt
    sudo cp <your_key> /opt/kasm/current/certs/kasm_nginx.key

  3. Start the Kasm Services.

    sudo systemctl start kasm

  4. Test if nginx is running correctly. Wait 30 seconds.

    sudo docker ps | grep kasm_proxy

  5. Ensure that the container has been running for more than 30 seconds.

Video Tutorial​

This video walks you through installing an SSL certificate on your Kasm Workspaces instance using Let's Encrypt.