If you are renewing an expired SSL certificate in between Workspace ONE Assist releases, you must update the renewed site Thumbprint. This task updates the Thumbprint with AdminWebPortal.
If you are installing or upgrading the Workspace ONE Assist server, do not take these steps.
Prerequisites
During the normal course of installing or upgrading the Workspace ONE Assist server, you must also update the site thumbprint. But the Workspace ONE Assist installation or upgrade process takes care of updating the site thumbprint.
You only need to follow these steps to update the site thumbprint with AdminWebPortal if you are manually renewing an expired SSL certificate in between Workspace ONE Assist installations or upgrades and have already bound it to the website.
Procedure
- Start the MMC console from the Workspace ONE Assist server.
- In the left-side panel, navigate to and locate, by name, the SSL certificate you installed or updated recently.
- Double-click this SSL certificate.
The Certificate screen displays.
- Select Details tab at the top.
- In the Show drop-down menu, select Properties Only.
- Click once on the text box Thumbprint.
A series of number and letter pairs appears in the panel beneath the
Show panel.
- Select all these pairs of characters and copy them to the clipboard. Close the MMC console.
- Open Notepad from the server desktop.
- Paste the clipboard contents into the empty notepad screen.
Note: The new thumbprint when you copy from the certificate is in lowercase. Ensure you change it to uppercase before pasting it in the AdminWebPortal. If unchanged, it can cause errors.
- In Notepad, enter the keyboard shortcut Ctrl-H.
The
Replace screen displays.
- Enter a single space in the Find what text box.
- Click the Replace All button and then close the Replace screen by clicking the X.
All the spaces in between the number/letter pairs are removed. Using notepad also takes the ANSI text copied from the MMC console and converts it to ASCII text, which is the format we want when we go to paste that thumbprint in the AdminWebPortal.
- In Notepad, select the newly formatted thumbprint and copy it to clipboard with Ctrl-C. Close Notepad.
- Open your browser and log into the AdminWebPortal using your domain credentials.
For example, https://<FQDN>/AdminWebPortal/login.aspx.
- Select the Default Service Configurations.
- In the Search bar, enter
certid.
To display the search results properly, you might need to scroll down to the page size modifier and maximize the number of pages it can display. Doing this sets a large enough playing field to display any search result.
- Identify the certid in the Parameter Name column.
:ctl.svc.cnp.tch/certid. In the Options column of the same line, select the Edit (
) icon.
Upon clicking the Edit icon, you might need to search for certid once again. Locate the certid
Parameter Name and notice that the
Parameter Value is now editable.
- Select the existing string of characters in the Parameter Value for
:ctl.svc.cnp.tch/certid and replace it with the new Thumbprint string you have stored in your clipboard by applying the Ctrl-V keyboard shortcut.
Note: Ensure you change the new thumbprint from lowercase to uppercase; if unchanged, it can cause errors.
- Select the Save (
) icon.
- Select Service Configuration.
- Search for
ConnectionProctorService and review its Status column.
- For both Active status and Inactive status for
ConnectionProctorService, select the Edit () icon and update the :ctl.svc.cnp.tch/certid Parameter Value with the new Thumbprint string (Ctrl-V).
- Select the Save () icon for each, as applicable.
- Select the Update button at the bottom of the page.
- Restart all services (Core and IIS services). Select the Start menu and enter
run on your keyboard. In the Open text box, enter services.msc
The
Services application displays.
- Locate all services that are labeled Aetherpal.
- Stop all these Aetherpal services.
- Start all Aetherpal services.
Results
The site Thumbprint has been updated.
