Replacing default certificates - Security Center 5.11

Security Center Administrator Guide 5.11
Product
Security Center
Content type
Guides > Administrator guides
Version
5.11
Language
English
Last updated
2024-07-05

To replace the self-signed certificate on a server with a certificate from a trusted source, you must import the new certificate into the Local Computer Certificate Store of your server before you can select it in Server Admin.

Before you begin

Follow your company's procedure regarding the enrollment of certificates. If your situation requires you to create a custom request, make sure you follow the recommendations required for Security Center.

What you should know

To improve the security of your system, you only need to replace the self-signed certificate on your main server. If you have Directory failover configured, you must replace the certificate on all Directory servers. It is not necessary to change the certificate on all expansion servers.

Procedure

  1. On your main server, start Microsoft Management Console (mmc.exe).
  2. In the Console window, expand Certificates.
  3. Under Certificates (Local Computer), right-click Personal, and then click All Tasks > Import.
  4. Follow the instructions in the Certificate Import Wizard to import the certificate.
  5. Open Server Admin on your server.
  6. Click the Genetec Server tab.
  7. Under Secure communication, click Select certificate.
  8. In the dialog box that opens, select the new certificate you imported and click Select.
    The Select certificate dialog box in Server admin with a list of certificates.
    NOTE: If the certificate you selected is not valid (not using Legacy key for example), an error message is displayed and the certificate cannot be applied.
  9. Click Save, and restart the Genetec™ Server service.