The Unifi controller uses a keypair stored in the keystore stored in Ubiquiti Unifi/data/keystore using a password of “aircontrolenterprise”

The keys can be updated using "Keystore Explorer" from https://keystore-explorer.org/


  1. Download the new wildcard Cert from Godaddy to SEQ-WEB
  2. Install the cert on the server
  3. Use DigiCert Util to export the cert with default values
  4. Upload the pfx file to Onedrive
  5. Download the file from Onedrive to SEQ-Util
  6. Use Key Explorer to import the new key pair into the keystore file
  7. Save the keystore file and overwrite
  8. Restart the service (net stop Unifi net start Unifi)



https://www.orbitsit.co.uk/2022/06/ubiquiti-unifi-controller-ssl-certificate-install-renew-on-windows/