Chapter 4 Enhancing Security 71
5 Click Save.
Renewing an Expiring Certicate
Certicates have an expiration date and must be renewed periodically. Renewing a
certicate is the same as replacing a certicate with a newly generated one with an
updated expiration date.
To renew an expiring certicate:
1 Request a new certicate from the CA.
If you are your own CA, create one using your own root certicate.
2 In Server Admin in the Server list, select the server that has the expiring certicate.
3 Click Certicates.
4 Select the Certicate Identity to renew.
5 Click the Action button and select “Replace Certicate with Signed or Renewed
Certicate.”
6 Drag the renewed certicate to the sheet.
7 Click Replace Certicate.
Replacing an Existing Certicate
If you change the DNS name of the server or any virtual hosts on the server, you must
replace an existing certicate with an updated one.
To replace an expiring certicate:
1 Request a certicate from the CA.
If you are your own CA, create one using your own root certicate.
2 In Server Admin in the Server list, select the server that has the expiring certicate.
3 Click Certicates.
4 Select the Certicate Identity to replace.
5 Click the Action button and select “Replace Certicate with Signed or Renewed
Certicate.”
6 Drag the replacement certicate to the sheet.
7 Click Replace Certicate.
Using Certicates
In Server Admin, services like Web, Mail, VPN, and so on display a pop-up list of
certicates that the administrator can choose from. The services vary in appearance
and therefore the pop-up list location varies. Consult the administration guide for the
service you’re trying to use with a certicate.