Renew SSL Certificate

To renew an SSL server certificate, navigate to the Server Certificates repository at Repository | Certificates | Server Certificates

Find the certificate to be renewed and select "Renew" from its context menu:

This will create a new Certificate Signing Request (CSR)

Fill in the CSR Form

Click SAVE

A new CSR has been created.

Next, to get the new certificate, you need to follow the steps below to complete the CSR

To submit the Certificate Signing Request (CSR) to a Certificate Authority, e.g. GoDaddy, to be signed, follow the steps below:

Click the context menu of the newly created Certificate Signing Request

Select "View" from the context menu

Copy the CSR text and submit it to your CA

Once your CA has signed your CSR, it will issue you a certificate.

Download the SSL certificate. Commonly, the certificate is delivered in a CRT file, e.g. "dualshield.deepnetid.com.crt"

Also, a CA bundle file will be provided. The CA bundle file includes the certificate of the root CA and the intermediate CA, e.g. "dualshield.deepnetid.com.ca-bundle"

Finally, you need to complete the Certificate Signing Request using the certificate that you downloaded from the CA

Click the context menu of the Certificate Signing Request

Select "Complete Certificate Request"

Select the CA Bundle file, and the certificate CRT file

Click Save

The certificate will be saved in the "Server Certificate" list

Please note that this does not automatically update the web certificate of your DualShield consoles. If you wish to do that then...

If you already have the PFX file of the new certificate generated from a 3rd-party tool, then please follow the guide below.

Navigate to "SSO | SSO Servers", click the context menu of "Single Sign-On Server"

Select "Replace Certificate" from the context menu

The "Replace Console Certificate" window will pop up:

Select the certificate to be used

Click "Use This Certificate"

Page tree

Renew SSL Certificate