Replacing a Certificate on Colleague UI Server

 

 

How To...

Replacing a Certificate on Colleague UI Server

Steps To Implement


  1. Download certificate from Digicert. Make sure for TEST and PROD you ordered an EV Multi-Domain SSL that includes both servers names. For test that would be uitest.tccd.edu, uitesta.tccd.edu, and uitestb.tccd.edu. For PROD it would be ui.tccd.edu, uia.tccd.edu, and uib.tccd.edu. 
  2. Install your new certificate on the UI server -- in IIS go to "Certificates" and select import. Choose your new certificate.
  3. In IIS, select the UI website and choose Bindings on the right.
  4. Edit the secure binding and switch it to the new certificate. 
  5. Choose to View the certificate, click the Certification Path tab, highlight the intermediate cert (the certificate in the middle of the chain of certificates) and click View Certificate. 
  6. In the new certificate window, click the Details tab, and then Copy to File.
  7. Use the wizard to export the file using Base-64 to the desktop of the UI server. 
  8. After the wizard is complete, close the intermediate certificate so that you are back at the main certificate.
  9. From the Details tab, select the root certificate at the top of the chain of certificates.
  10. Repeat steps 6 and 7 to export the root certificate as well (and the other intermediate certificate if there are two). 
  11. On the Colleague app server, access the path from UIES (step1) and make a note of the permissions on the existing certificates in this directory. Our path is /datatel/certificates/UICerts
  12. Remove any existing certificates so the folder is empty.
  13. Copy the intermediate and root certificates from the desktop of the UI server to that folder on the Colleague app server (if using FTP then be sure to choose binary mode). Make sure the permissions are correct. 
  14. In a browser on the UI server, go to the Colleague UI Admin Site, select the State Service tab, and restart the service. 
  15. On the Colleague Admin UI site, click on the environment --> 'User Interface' tab and verify the 'UI Web service base URL' is correct.  For UI 5, the URL should either return JSON text in the browser or ask to download the JSON text.
  16. In IIS, restart the UI website and recycle the app pool for UI. 
  17. Repeat steps 1-4 on the secondary server for TEST and PROD. DEV only has a single server.

 

Print Article

Details

Article ID: 280
Created
Wed 5/18/22 11:41 AM
Modified
Wed 5/18/22 12:54 PM