> For the complete documentation index, see [llms.txt](https://helpcenter.xopero.com/xopero-one-en/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://helpcenter.xopero.com/xopero-one-en/deployment-and-configuration/xopero-one-management-service-xms/installation-with-an-ssl-certificate.md).

# Installation with an SSL certificate

## Kestrel configuration <a href="#using_your_own_ssl_certificate" id="using_your_own_ssl_certificate"></a>

{% hint style="warning" %}
Remember that once you modify the XMS settings you <mark style="color:$danger;">**must**</mark> switch the agent's communication protocol to HTTPS for the **Xopero ONE Backup\&Recovery** service to work correctly.
{% endhint %}

{% hint style="info" %}
You can find more information about **Kestrel** configuration [here](https://learn.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel/endpoints?view=aspnetcore-5.0).
{% endhint %}

{% stepper %}
{% step %}
Open `appsettings.json` file located in **Xopero ONE Management Service** installation directory.
{% endstep %}

{% step %}
Find `commented_out_Kestrel` line.

{% code title="Default commented\_out\_Kestrel line:" overflow="wrap" %}

```json
"commented_out_Kestrel": {
"Endpoints": {
"Http": {
"Url": "http://*:5000"
}
}
```

{% endcode %}
{% endstep %}

{% step %}
Modify the following code lines— erase `commented_out_` prefix and add the HTTPS configuration as follows:

{% code title="Modified commented\_out\_Kestrel section:" overflow="wrap" %}

```json
"Kestrel": {
"Endpoints": {
"Http": {
"Url": "http://*:5000"
},
"Https": {
"Url": "https://*:5001",
"Certificate":{
"Path": "<.pfx file path>",
"Password": "<certificate password>"
}}}}}
```

{% endcode %}

> **Path:** path to the .pfx fil&#x65;**\***&#x20;
>
> **Password:** certificate password
>
> **\***<mark style="color:red;">**IMPORTANT!**</mark> Remember to use double slash— if you're keeping the certificate in **C:**<mark style="color:red;">**\\**</mark>**cert.pfx** directory, the path should be entered as **C:**<mark style="color:red;">**\\\\**</mark>**cert.pfx** instead.
> {% endstep %}
> {% endstepper %}

***

## Agent configuration

{% hint style="warning" %}
Modifying the IP address or the protocol (http, https) of the **Management Service** will change the active agent's status to <mark style="color:$danger;">**offline**</mark>. It will reconnect once you switch the agent's protocol to HTTPS.
{% endhint %}

{% stepper %}
{% step %}
Go to your **Xopero ONE Agent** installation directory and open `config.json` file.

Default location of the `config.json` file is:

1. <img src="/files/BkF4yqlPcY8cysY3qDh8" alt="" data-size="line"> **For Windows:** <kbd>C:\Program Files\Xopero ONE Backup\&Recovery Agent</kbd>
2. <img src="/files/31OmlsZIaWiWpdja3qBY" alt="" data-size="line"> **For Linux:** <kbd>/opt/XoperoONEBackupAgent/</kbd>
   {% endstep %}

{% step %}
Change the `ServiceUrl` value from **HTTP** to **HTTPS**.

{% hint style="success" %}
You can edit `config.json` with a simple text editor (i.e., **Notepad**, **Notepad++**).
{% endhint %}

<figure><img src="/files/5knqrgvEJ2OewdeXUL6z" alt=""><figcaption><p><em>Example of <code>config.json</code> file opened in <strong>Notepad++</strong>.</em></p></figcaption></figure>
{% endstep %}

{% step %}
Once the value is changed, the agent will come back online.
{% endstep %}
{% endstepper %}