Tools

Dameware: How to change the bound certificate

This article outlines the process for changing the certificate bound on the host's interface on the Dameware Central Server (DCS) and Dameware Internet Proxy (DIP).

First published date

1/13/2026 5:09 PM

Last published date

1/15/2026 4:40 PM

Overview

This article outlines the process for changing the certificate bound on the host's interface on the Dameware Central Server (DCS) and Dameware Internet Proxy (DIP).

Product section

Dameware Remote Support & Mini Remote Control

Resolution

To change the certificate on the DCS and DIP host's interface to a new certificate follow the below steps. Ensure remove the portions of the instructions that don't apply (e.g. if updating the certificate on the DCS host to remove the port for the DIP port)

 

    1. After you have received your certificate from a third party certificate authority, log into the Dameware Central Server computer as an administrator.
      • The 3rd party certificate must have a private key on it.
    2. Run certmgr.msc.
    3. Copy the certificate to the personal and trusted root certification authentication folder.
      • The Application ID (appid) is a GUID that can be used to identify the owning application. See the sslcertdetails.txt file and take note of the appid.
    4. Double-click the copied certificate, and click Install certificate.
    5. Run services.msc.
    6. Stop the Dameware Server service.
    7. Open a command line prompt, and run the following command to remove the existing certificate: netsh http delete sslcert ipport=0.0.0.0:<6133(DCS)/443(DIP)>
      • If you use a port number other than <6133(DCS)/443(DIP)>, enter that port number.
    8. In the Certificate Manager, view the details of the certificate you installed, and copy the certificate hash.
    9. In the command line prompt, run the following command to bind the certificate to the port: netsh http add sslcert ipport=0.0.0.0:<6133(DCS)/443(DIP)> certhash={certificate_hash} appid={appid-formated_number} certstorename=root
      • ​​​​​​​If you use a port number other than <6133(DCS)/443(DIP)>, enter that port number.
    10. Replace certificate_hash with the certificate hash you copied and replace appid-formated_number with a number in the appid format, such as {00112233-4455-6677-8899-AABBCCDDEEFF}.
    11. Start the Dameware Server service.