To renew the SSL Certificate of a DualShield RADIUS Server, follow the steps below.

Step 1: Renew the SSL certificate that is currently being used by the RADIUS server

To renew an SSL server certificate, navigate to the Server Certificates repository at Repository | Certificates | Server Certificates

Find the certificate to be renewed and select "Renew" from its context menu:

This will create a new Certificate Signing Request (CSR)

Fill in the CSR Form

Click SAVE

A new CSR has been created. 

Next, to get the new certificate, you need to follow the steps below to complete the CSR

To submit the Certificate Signing Request (CSR) to a Certificate Authority, e.g. GoDaddy, to be signed, follow the steps below:

Click the context menu of the newly created Certificate Signing Request


Select "View" from the context menu

Copy the CSR text and submit it to your CA

If your certificate has been automatically renewed by GoDaddy, then you might have to firstly Re-Key your certificate

Once your certificate is ready, you will be able to download it.

Important!: Before downloading please check the creation date or for best results go click on 'My Certificates' on the top left then click on the newly created certificate, check the creation date, and if correct download from there.


Select "Tomcat" as the Server type

Downlolad the certificate zip file, and unzip it to a folder in your hard drive:

The file with the name "gd-bundle-g2-g1.crt" is the certificate of GoDaddy's intermediate CA. You can double click the file to check its content.

Once your CA has signed your CSR, it will issue you a certificate.

Download the SSL certificate. Commonly, the certificate is delivered in a CRT file, e.g. "dualshield.deepnetid.com.crt"

Also, a CA bundle file will be provided. The CA bundle file includes the certificate of the root CA and the intermediate CA, e.g. "dualshield.deepnetid.com.ca-bundle" 


Finally, you need to complete the Certificate Signing Request using the certificate that you downloaded from the CA

Click the context menu of the Certificate Signing Request


Select "Complete Certificate Request"

Select the CA Bundle file, and the certificate CRT file

Click Save

The certificate will be saved in the "Server Certificate" list


Please note that this does not automatically update the web certificate of your DualShield consoles.  If you wish to do that then...

If you already have the PFX file of the new certificate generated from a 3rd-party tool, then please follow the guide below.

Navigate to "SSO | SSO Servers", click the context menu of "Single Sign-On Server"

Select "Replace Certificate" from the context menu

The "Replace Console Certificate" window will pop up:

Select the certificate to be used

Click "Use This Certificate"











Step 2: Apply the renewed SSL certificate to the RADIUS server

Navigate to the repository of the SSL Server Certificates at Repository | Certificates |  Server Certificates.

Click on the context menu icon of the server certificate that you want to apply to an SSO server.

Select Apply To from the menu

In the Service Type box, select Radius Server

In the Service Instance box, select the instance(s) of the RADIUS server(s) to which you want to apply this certificate

Click Apply


  • No labels