SSO App certificate expired.

Jul 22, 2010 at 9:02 PM

 

Hi all,

My certificate expired a while back, and I requested a new one. Can anyone point meto good instructions on how to reinstall the new cert?

I've gotten 5 or 6 sets of non functioning instructions from the Tech people for Live@edu. I exported the new cert without a password,  I deleted my old cert, installed the new cert (like any other cert) and

set permisions for ASPNET and NetworkService accounts.

It's still not working.

Any help is greatly appreicated.

Thanks,

Cal-

Jul 22, 2010 at 9:07 PM
Hi Cal
did you check the thumb print in the web config file is the same as the one for your new cert?

Kieron



Kieron Lonergan
MLE Development Manager
Learning and Research Technologies
Manchester Metropolitan University
0161 247 1332
K.Lonergan@mmu.ac.uk
www.lrt.mmu.ac.uk\kieron

Before acting on this email or opening any attachments you
should read the Manchester Metropolitan University's email
disclaimer available on its website
http://www.mmu.ac.uk/emaildisclaimer

>>> "caladin" 22/07/10 10:03 PM >>>

From: caladin

Hi all,

My certificate expired a while back, and I requested a new one. Can anyone point meto good instructions on how to reinstall the new cert?

I've gotten 5 or 6 sets of non functioning instructions from the Tech people for Live@edu. I exported the new cert without a password, I deleted my old cert, installed the new cert (like any other cert) and

set permisions for ASPNET and NetworkService accounts.

It's still not working.

Any help is greatly appreicated.

Thanks,

Cal-

Jul 22, 2010 at 9:09 PM

The thumbprint for the new cert is Different, but I updated the new thumbprint to the app before

upgrading the Cert.

Thanks,

Cal-

Sep 1, 2010 at 4:02 AM

These are the instructions I used:

Please use the following steps to install your certificate:

  1. Click Start -> Run -> "MMC"
  2. Click File -> Add/Remove Snap-in
  3. Click Add -> select “Certificates” then click “Add”
  4. Select “Computer Account” -> click “Next”
  5. Select radio button "Local computer"
  6. Click “Finish” -> “Close” -> “OK”
  7. In the “Certificates (Local Computer)/Personal” store, right-click “Personal”, select “All Tasks” -> “Import” -> “Next”
  8. Type path to the .pfx file OR Use "Browse" button to find the security certificate in the file system
  9. Leave the Password field blank, click “Next”
  10. Select radio button "Place all certificates in the following store", confirm that "Personal" is selected as "Certificate store" and click "Next" -> “Next” -> “Finish”
  11. Verify that your certificate is installed by inspecting “Certificates( Local computer)/Personal /Certificates”
    1. Double-click on the certificate
      1. Verify that "You have a private key that corresponds to the certificate" appears on the certificate's "General" tab
      2. Verify that the certificate is currently valid by inspecting "Valid from" and "to" fields on the "General"  tab
  12. Download  and install WinHttpCertCfg.msi from http://www.microsoft.com/downloads/details.aspx?familyid=c42e27ac-3409-40e9-8667-c748e422833f&displaylang=en
  13. Open up a Command Line window
  14. Navigate to c:\program files\windows resource kits\tools\
  15. Type in “winhttpcertcfg -g -a NetworkService -c Local_Computer\My -s Sapipartner.com” (no quotes) then hit <Enter>.
  16. Open the cert and click the “Details” tab, scroll down to the bottom and click “Thumbprint”
  17. Copy the Value that displays in the bottom window
  18. Open up the “Web.Config” file in \Inetpub for the SSO Portal (Open in Notepad)
  19. Take the thumbprint you just copied and paste it in the CertThumb field.  Save and close the file.

This will install the certificate

Oct 26, 2010 at 6:12 PM

I've written a additional Install instructions http://www.christowles.com/2010/10/install-steps-for-microsoft-liveedu-sso.html