GuardPoint 10 – Enabling HTTPS for API (Self-Signed Certificate Method)

Overview

By default, the GuardPoint 10 API communicates over HTTP. This guide explains how to enable HTTPS using a self-signed certificate, removing the need for tools like stunnel in simple deployments.

The GuardPoint 10 API is a RESTful service using HTTP requests (GET, POST, PUT, DELETE) , so switching to HTTPS ensures encrypted communication for integrations.

Prerequisites

• GuardPoint 10 version 1.100.73 or higher
• Local administrator access
• PowerShell access
• Backup of:
  • C:\Program Files (x86)\Guardpoint10
  • C:\ProgramData\ACS

Step 1 – Prepare Certificate Script

1. Open the provided file:

   SelfSignCertificate.ps1

2. Edit the following line:

   $certPwd = "yourpassword"

3. Save the file.

Step 2 – Copy Script to ACS Folder

Copy the script to:

C:\ProgramData\ACS

Step 3 – Run PowerShell Script

1. Open PowerShell as Administrator

2. Run:

   Set-ExecutionPolicy Unrestricted

   → Press Y

3. Navigate to:

   cd C:\ProgramData\ACS

4. Run:

   .\SelfSignCertificate.ps1

   → Press R

This installs the “ACS” certificate

Step 4 – Verify Certificate

1. Press Win + R

2. Type:

   certmgr.msc

3. Navigate:

   Certificates – Current User  
   → Trusted Root Certification Authorities  
   → Certificates

4. Open certificate “ACS”
5. Check Valid From date

Step 5 – Install Certificate to Local Machine

1. Go to:

   C:\ProgramData\ACS\ACS.WService

2. Open:

   cert.cer

3. Click Install Certificate
4. Select:
   • Store Location: Local Machine
   • Enter Certificate Password
   • Store: Trusted Root Certification Authorities

Step 6 – Stop Services

Stop services via Watchdog:

• AcsServer
• AcsApiService

Step 7 – Enable HTTPS (ACS.WService config)

1. Open [with notepad++]:

   C:\ProgramData\ACS\ACS.WService\[ComputerName].appsettings.json

2. Replace:

{
"Kestrel": {
  "EndPoints": {
    "Http": {
      "Url": "http://0.0.0.0:10695"
    }
  }
},

3. With:

{
"Kestrel": {
  "Endpoints": {
    "Https": {
      "Url": "https://*:10695",
      "Certificate": {
        "Subject": "ACS",
        "Store": "My",
        "Location": "LocalMachine",
        "AllowInvalid": true
      }
    }
  }
},

Step 8 – Enable HTTPS (API config)

1. Open:

   C:\Program Files (x86)\GuardPoin10\AcsServer\Api\appsettings.json

2. Apply the same replacement as above.

Step 9 – Restart Services

Restart via Watchdog:

• AcsServer
• AcsApiService

Step 10 – Test HTTPS (Postman)

1. Open Postman

2. Change:

   http://localhost:10695

   ➜

   https://localhost:10695

3. Send test request (e.g. OData call)

API should now respond over HTTPS

Optional – Use Standard HTTPS Port (443)

You can replace port 10695 → 443 in both config files:

"Url": "https://*:443"

Then access via:

https://[ServerName]