In this chapter, you'll learn how to update or replace selected certificates.
Note |
|
|---|---|
 |
If encrypted communication is enabled, the ibaPDA devices must then trust the certificate again. |
Self-signed certificates
-
Stop the ibaCMC service.
-
In the
C:\ProgramData\iba\ibaCMC\Server\cafolder, delete thecertificate.pfxfile or rename it. -
Start the ibaCMC service.
After the restart, a new certificate named certificate.pfx will be generated automatically if a file with that name does not already exist in
the folder. The validity period of this new certificate is the same as the period
previously defined in the installer.
Certificate file (*.pfx)
-
Stop the ibaCMC service.
-
Copy the new PFX file to the same folder on the server where the currently used certificate is stored. iba AG recommend choosing the following path:
C:\ProgramData\iba\ibaCMC\Server\ca -
Start the ibaCMC service.
If the name of the new certificate differs from the existing one, copy the new PFX
file to the folder where the current certificate is stored, e. g. C:\ProgramData\iba\ibaCMC\Server\ca, and then restart the installation process to update the path to the new certificate
there.
Windows Certificate Store
-
Stop the ibaCMC service.
-
Update the certificate in the Windows Certificate Store.
-
Start the ibaCMC service.
If the certificate issuer has changed, restart the installation process to update the certificate issuer.