There are two methods for this.

Method 1

Step 1: Download the following file

Step 2: Extract the zip file and then copy the file 'das-task-import-1.0-standalone.jar' to c:\temp

Step 3: Open the elevated Command Prompt and execute the following command

"C:\Program Files\Deepnet DualShield\jre\bin\java" -jar c:\temp\das-task-import-1.0-standalone.jar -f "C:\Program Files\Deepnet DualShield\tomcat\conf\server.xml"

This tool will create a task in DualShield called Renew all agent certificates.

DualShield MFA Platform > How to Regenerate all Internal Agent and/or IDP Certificates > Renew_agents.png

Step 4: Restart the DualShield Server service once, and wait for DualShield to fully start (see How to check if a DualShield server is fully started )

Step 5: Restart the DualShield Server Service again.

Step 6: After restarted the dualshield service, log back in to the Admin console and go to Administration>Tasks. Check to see if the task has been executed succesfully.

DualShield MFA Platform > How to Regenerate all Internal Agent and/or IDP Certificates > Renew_agents2.png

Step 7: Go to Authentication>Agents and view any internal agent, such as Single Sign-On, Admin Console or Service Console

DualShield MFA Platform > How to Regenerate all Internal Agent and/or IDP Certificates > Renew_agents3.png

Step 8: Select Client Certificate and then click on Read More at the bottom of the window.

DualShield MFA Platform > How to Regenerate all Internal Agent and/or IDP Certificates > Renew_agents4.png

Step 9: Check the date of issue to ensure the certificate has updated succesfully.

DualShield MFA Platform > How to Regenerate all Internal Agent and/or IDP Certificates > Renew_agents5.png

Step 10: Go back to Administration>Tasks and delete the Renew all agent certificate task.

DualShield MFA Platform > How to Regenerate all Internal Agent and/or IDP Certificates > Renew_agents6.png

Method 2

If you do not plan to use the client agent certificate any more (for example, you have enabled OAuth2.0 authentication), you can just run the Update SSO IDP Certificate task to only update the IDP certificates.

DualShield MFA Platform > How to Regenerate all Internal Agent and/or IDP Certificates > Renew_agents7.png

SAML Integrations

IMPORTANT IF YOU HAVE A SAML INTEGRATION!

After completion of the above steps, you MUST provide the third party Service Provider with the updated IDP Metadata/Certficate.

Go to SSO> SSO Servers, click on the corresponding ellipsis and select the files you need to download from the menu..

DualShield MFA Platform > How to Regenerate all Internal Agent and/or IDP Certificates > Renew_agents8.png