Please help us test a new feature on the release version of Kaspersky MR20.

[wbywby456456]

@Dmitriy.Pisarets It is the SuperMITM feature in this post.

[harlan4096]

@wbywby456456

The testing continues, but You have to enable the SuperMITM in every beta manually, modifying the Windows Registry.

[wbywby456456]

@harlan4096
I enabled this feature through the registry, but after restarting my computer several times, I noticed that both Edge and Firefox browsers reverted to using Kaspersky's local certificate to detect encrypted traffic. My Kaspersky version is 21.24.8.522.

[harlan4096]

@wbywby456456

I have it enabled in official KES 12.12.0.522, to do so, I added the key here:

And the proof in Process Explorer -> FireFox (Environment tab in main process):

Try also re-enabling Self-Defense, after rebooting.

P.S.: another proof, the cert. of this site:

[wbywby456456]

@dmitriy.pisarets I followed the instructions in this post, but after restarting my computer several times, everything reverted back to the way it was before.I noticed that both Edge and Firefox browsers reverted to using Kaspersky's local certificate to detect encrypted traffic. My Kaspersky version is 21.24.8.522.

[harlan4096]

@wbywby456456

Please attach captures of Your Windows registry keys added...

[Dmitriy.Pisarets]

@wbywby456456 hello!
Can you please collect our traces and create a report on this forum?

steps:

1. turn on detailed traces (customer Service -> support tools)
2. set up SuperMITM feature
3. wait till it will roll back (restart your PC several times)
4. turn off traces
5. zip and upload traces to any fileshare service
6. send link to archive to me in private messages here.

You can create report here - https://eap.kaspersky.com/category/1291

Thank you in advance!

[wbywby456456]

@harlan4096
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\KasperskyLab\AVP21.24\environment

[wbywby456456]

@Dmitriy.Pisarets I have sent you the attachment via private message as requested in this post. Please check your inbox.

[harlan4096]

@wbywby456456

I just created a small tutorial to enable SuperMITM in Kaspersky (Home Product), feel free to download this docx file from my personal MEGA cloud:

https://mega.nz/file/p14SwbSA#aZMwQcYkw-iALTdLeEMrivfBeaqBbybTlbHt1Q1UL6I

[wbywby456456]

@harlan4096 Thank you very much for your instruction. I will try it.

[wbywby456456]

@harlan4096 said:

SuperMITM

After adding the registry entry at HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\KasperskyLab\protected\KIS\environment and restarting, my Kaspersky mysteriously reactivated the SuperMITM feature.Thank you very much,I'll keep an eye on it to see if this function stops working after a couple of days.

[harlan4096]

@wbywby456456

Great! 👏

[harlan4096]

I think the steps in 1st post are a bit wrong, since they should say: key in ..\KIS\environment...

At 1st I also had the same issues until I found there was a 2nd \environment, and found adding there the key, it worked!

[wbywby456456]

@harlan4096 An even stranger thing happened today—after restarting my computer, I found that the SuperMITM feature in Edge had disappeared, while it still worked normally in Firefox. I'm wondering if this might be related to some browser add-on.

[harlan4096]

@wbywby456456

Hum... I usually don't use Edge at all, will test here if I have the same behavior.

What add-ons do You have installed in Edge?

[wbywby456456]

@harlan4096 Used an ABP ad plugin, and Kaspersky's own plugin, basically that's it

[harlan4096]

@wbywby456456

Here is working fine:

[wbywby456456]

@harlan4096 Strangely enough, when I checked my Firefox browser today, I found that the certificate had reverted to a “replaced” status; this seems to happen randomly and without any pattern.

[wbywby456456]

Interestingly, when I restart my computer instead of using Fast Startup to boot it up, SuperMITM returns to normal operation.@dmitriy.pisarets @harlan4096