You can manually install or renew certificates on selected units at any time, using the Hardware inventory task.
What you should know
Procedure
- From the homepage, open the Hardware inventory task.
- Right-click the column headers and click Select columns.
-
Select the certificate-related columns which are hidden by default.
- Certificate status
-
Certificate management status of
the unit.
- Managed
- The certificate is managed by the system and is valid.
- Expired
- The certificate is managed by the system but has expired.
- Unmanaged
- The certificate is not managed by the system but can be. To enroll the unit for certificate management, select the unit and click Update certificate () at the bottom of the screen.
- Unsupported
- The certificate cannot be managed by the system. The reason might be that the unit model or extension does not support this feature, or that the unit firmware is outdated.
- Certificate expiration
- Certificate expiration date. The date is shown only if the certificate is managed by the system. To view the certificate details in a separate window, select the unit and click View certificate () at the bottom of the screen.
- Last certificate update result
- Success or failure of the last certificate update carried out by the system.
-
Set up the query filters to look for access control (or video) units.
Open the Units filter and do one of the following:
- Select All entities and select the Access Manager (or Archiver) roles you want to select all the units they control.
- Select Access control units and click to apply a custom filter of your choice.
- Select Video units and click to apply a custom filter of your choice.
- Click Generate report.
-
Select the units you want to enroll for unit certificate management or certificate
renewal, and click Update certificate ().
The Update certificate dialog box opens.
-
Under Certificate information, select one of the following:
- Inherit from Unit Assistant
- Use the information configured in the Unit Assistant role's Properties page.
- Use the certificate of the current unit
- Use the information found in the currently installed certificate. This option is only available if some of the selected units have a certificate installed by Security Center. The units that are still unmanaged are skipped when this option is selected.
- Custom
- Enter specific information for this scheduled task.
- Validity period
- This value is a CA setting. It can only be changed from the Unit Assistant role's Certificate profile page.
- Show advanced
- Click this button to show the optional properties defined in the Unit Assistant role, such as Country, State, Locality, and so on, that you can override here.
- If you selected Custom, enter the custom settings as required.
- Click Update.
-
Confirm that the update was successful.
Wait 10 to 20 seconds and refresh the report. Check the certificate status, last update result, and expiration to confirm that everything worked as expected.NOTE: After your system installs a certificate on a unit, you should no longer use any third-party tool to update the certificate.