Replace the Factory Certificate with an Engine and CM Certificate on Microsoft Windows

Edit online

About this task

To replace the factory certificate, with a certificate at the engine and a different certificate at CM on Microsoft Windows:

Procedure

  1. Stop CM on Microsoft Windows from Microsoft Windows services.
  2. Using a command line interface at CM, navigate to the install_dir\bin directory.
  3. Type the following command to replace the factory certificate with a CM certificate:
    configureCmSsl -u cmCert=<cert file> cmCertAlias=<alias>
    where:
    • <cert file> is the path and file name to the certificate that replaces the factory certificate for CM.
    • <alias> is the alias name for the new CM certificate. It can be any value other than factory. If you do not specify an alias, cm is assigned as the default.
  4. On the CM computer, type the following command to replace the factory certificate with an engine certificate:
    configureCmSsl -u engCert=<cert file> engCertAlias=<aaliaslias>
    where:
    • <cert file> is the path and file name to the certificate you want to use to replace the factory certificate for the engine.
    • <alias> is the alias name for the new engine certificate. This can be any value other than factory. If you do not specify an alias, engine is assigned as the default.
  5. Type the following command to create an export file of the certificate store:
    configureCmSsl -e file=<export file>

    where <export file> is the path and file for the export file.

  6. Copy the file you created in step 5 to the engine.
  7. Stop the engine on Microsoft Windows from Microsoft Windows services.
  8. Type the following command to import the certificates created in step 3 and step 4.
    configureEngineSsl -i file=<export file> engCertAlias=<alias>
    where:
    • <export file> is the path and file for the export file.
    • <alias> is an alias name for the engine certificate assigned in step 3. If an engCertAlias was omitted in step 3, specify engine as the alias.
  9. Start the engine on Microsoft Windows from Microsoft Windows services.
  10. Start CM on Microsoft Windows from Microsoft Windows services.