How to update the NetOps Portal HTTPS certificate

Products

• CA Performance Management
• Network Observability

Issue/Introduction

By using the existing keystore/private certificate, we maintain the private key/keystore passwords so these do not need to be changed in the ssl.ini files.

How to update the NetOps Portal HTTPS certificate

How to convert the NetOps Portal HTTPS certificate from a Self-Signed Certificate to a CA-Signed Certificate

HTTPP Status 500 - Internal Server Error

The server encountered an unexpected condition that prevented it from fulfilling the request. 

My HTTPS certificate is expiring

How to update SSL certificate on Performance Center

Environment

All supported releases of NetOps Performance Management

Resolution

To update the NetOps Portal server certificate

1. Generate the CSR from the private certificate (PrivateKeyEntry) in the existing jetty keystore using the <install_directory>/PerformanceCenter/SslConfig utility, option 8:  
   
2. Take the resultant CSR to your Certificate Authority and get it signed.  You should receive a Signed Server Certificate as well as the CA's root and intermediate certificates
3. Using option 4 in the aforementioned SslConfig utility, import the Root and Intermediate certificates if they are not already there
4. Using option 5 in the aforementioned SslConfig utility, update the existing Server Certificate.  Note: This will require Portal services be restarted

Example SslConfig menu list as of 25.4.10:

Additional Information

For additional information and scenarios, please review the Certificate Administration section of the documentation.