Encryption between the XProtect Update Manager components

To install XProtect Update Manager, you must use certificates for encryption that are trusted by all hosts in the system.

During the installation of the update server, you select the type of certificate to use:

• System-generated certificates are self-signed certificates created by the installation wizard. Every system-generated certificate comes with a secure connection key. You add the secure connection key on every update agent computer to establish a secure connection with the update server.

• Your own certificate. To see your certificate listed in the installation wizard, you must import a .pfx certificate to the Personal store on the computer.