Applies to: Apache, Policy Server, Seclore API Server, Seclore Online, Lite Viewer.



Pre-requisite: 


1.Issue new Certificates.


Follow the attached KB to generate Private key and CSR:

https://support.seclore.com/en/support/solutions/articles/11000127918-generate-key-and-csr-file-using-apache


2. Provide the CSR and Private key to CA Vendor and issue new certificates. Ignore this step if you already have the certificate.
3.Kindly keep new Domain certificate(Cert.crt), Root certificate(CACerts.crt) and Private key(Priv.key) ready before performing the activity.

3. Take backup of old certificates and key before replacing the SSL Certificates.


Note: 

  • There will be a downtime of approximately 1 hour while replacing the SSL certificate. Hence, we recommend performing this activity off-office hours.
  •  The same steps need to be performed on Production, Failover and Disaster Recovery Servers.

 

Windows Binary Environment

1. Non-DAC Policy Server (Seclore Version less than 3.27.0.0)


Follow the attached article for steps to be performed: 

https://support.seclore.com/en/support/solutions/articles/11000127913-ssl-replacement-windows-non-dac-less-than-3-27-0-0-


2. DAC Policy Server (Seclore Version greater than 3.27.0.0) 


Follow the attached article for steps to be performed:

https://support.seclore.com/en/support/solutions/articles/11000127914-ssl-replacement-windows-dac-greater-than-3-27-0-0-


Linux Docker Environment

1. Non-DAC Policy Server (Seclore Version less than 3.27.0.0)


Follow the attached article for steps to be performed:

https://support.seclore.com/en/support/solutions/articles/11000127915-ssl-replacement-linux-non-dac-less-than-3-27-0-0-


2. DAC Policy Server (Seclore Version greater than 3.27.0.0)


Follow the attached article for steps to be performed:

https://support.seclore.com/en/support/solutions/articles/11000127916-ssl-replacement-linux-dac-greater-than-3-27-0-0-


3. DAC Policy Server (Seclore Version greater than 3.28.0.0)


Follow the attached article for steps to be performed:

https://support.seclore.com/en/support/solutions/articles/11000127917-ssl-replacement-linux-dac-greater-than-3-28-0-0-


Need more help? 

Contact Seclore Support 

 [email protected]