Arcserve RHA Troubleshooting › Renew an Expired SSL Certificate

Renew an Expired SSL Certificate

When you are using an SSL Certificate to secure communication, you may need to renew expired certificates or install new ones. The following procedure applies to both authorized or self-signed SSL certificates. Contact Support to obtain a new certificate.

To renew an expired SSL certificate

1. Obtain a new certificate and install it on the machine where the Control Service is running.

   Note: You do not need to stop the Control Service during this procedure.

2. To remove the old certificate binding, run the following command:

   httpcfg.exe delete ssl -i 0.0.0.0:{CS SSL Port Number} 
   

   The CS SSL Port Number parameter is the port number you entered during the Control Service installation. You can find this value in the ws_man.exe.config file, under ws_port value.

   The command result should not return any errors.

   The end of the message should be:

   ...completed with 0.
   

3. To bind the new certificate to the Control Service SSL port, run the following command:

   httpcfg.exe set ssl -i 0.0.0.0:{CS SSL Port Number} -h {New Certificate SslHash} 
   

   The httpcfg.exe parameter is a standard utility for Windows Servers, and you can find it in the Control Service installation directory.

   You can find the New Certificate SSlHash parameter in the Certificate dialog, on the Details tab, under the Thumbprint value. Enter the Thumbprint value without spaces, in a single continuous string.

   The command result should not return any errors.

   The end of the message should be:

   ...completed with 0. 
   

   The SSL certificate is now renewed.