PBS SSL Certificate Replacement: Fix Failed Backups & Browser Errors

Published 26/07/2026

Description

An expired Proxmox Backup Server (PBS) SSL certificate can cause more than a browser warning: in my setup, it caused backup processes to fail. Contents: 0:00 - Introduction 0:10 - Description 1:00 - The Problem 1:52 - The Solution 7:20 - Conclusion In this video, I show how to replace an expired certificate on Proxmox Backup Server when you use an internal certificate authority, such as Microsoft Active Directory Certificate Services (AD CS). My certificate authority exports the renewed server certificate as a password-protected PFX file. Because Proxmox Backup Server is Debian-based, it requires the certificate, private key, and root CA certificate in PEM/text format rather than directly using a PFX file. This tutorial is useful if you are using: Creating or renewing a PBS certificate through an internal CA Exporting the certificate as a PFX file Using OpenSSL to extract the certificate, private key, and certificate chain Preparing the PBS proxy.pem certificate file Preparing the PBS proxy.key private-key file Copying both files to /etc/proxmox-backup/ Restarting the Proxmox Backup Server proxy service Checking the optional local CA certificate configuration used by backup connectivity Using an internal CA is a practical option for internal Proxmox Backup Server management interfaces, but certificates still expire. This workflow helps you replace them cleanly and restore trusted browser access without ignoring certificate warnings. #Proxmox #ProxmoxBackupServer #SSL Follow me on X: https://l.samayas.eu/jo3eaYEf3E?P=YT&V=147 Buy me a Coffee : https://l.samayas.eu/jX6xL7EWhd?P=YT&V=147 Studio Equipment Camera Sony Alpha ZV-E10 II: https://l.samayas.eu/k7y95TREl0?P=YT&V=147 Secondary Camera Obsbot Tail Air: https://l.samayas.eu/iFQu9WfmCw?P=YT&V=147 Elgato Prompter: https://l.samayas.eu/fHVrqqXtSc?P=YT&V=147 Microphone Rode Wireless GO II: https://l.samayas.eu/afBINjiBXN?P=YT&V=147