Replacing SSLVPN Certificate
I have a certificate that is apparently in use, but I want to change it to use a new one.
I have the new one imported and it shows in the validated column as "yes".
The current certificate shows expires in x days in the validated column.
If I click the (X) button associated with the current/active certificate, an error message appears at the bottom right side of the page "Error: Cert is being Used by: https".
To attempt to address, I went into SSL VPN, SSL VPN Server Settings & changed the drop down for Certificate Selection to the new Certificate and then clicked "accept"
>This didn't work.
>I restarted in case required. This also didn't resolve.
I then changed the LAN management to allow http traffic and logged in to manage the firewall while not using https & attempted again -again this didn't work.
What am I missing?
Best Answers
-
shiprasahu93 Moderator
Hello @Disconnected,
Please check if this certificate is being used for the firewall management. You can navigate to MANAGE | Appliance | Base Settings and under the Web Management Settings section, there would be a Certificate Selection option. Make sure that it also points to the new certificate.
Thanks!
Shipra Sahu
Technical Support Advisor, Premier Services
1 -
shiprasahu93 Moderator
Yes, I do not remember the exact threshold, but I think if there are only 30 or 15 days left for expiration it shows up there to alert you that a renewal is pending. Usually most of these certs are good for at least year so these messages do not appear if you load them with higher expiration times. I hope that helps!
Shipra Sahu
Technical Support Advisor, Premier Services
2
Answers
Thank you!
You were correct. It was using the old cert.
I set it to use the new certificate.
Back on the certificates page, I've deleted the old one that was showing x days remaining.
The new cert simply shows "yes" under the validated column vs. x days remaining. Why the difference between the two? Just a matter or time, or something else?
Thank you again.
It does. Thanks again.
You're welcome. Have a good one!
Shipra Sahu
Technical Support Advisor, Premier Services