Symantec VIP Manager OIDC token renewal for SiteMinder
Article ID: 444122
Updated On:
Products
Issue/Introduction
Multiple OIDC application connectors (sucha as SiteMinder x509) are setup in VIP Manager for different application environments. Customers will want to renew the UAT/Lower environment token (before the Production token for testing and workflow purposes. However, the UAT OIDC renewal date may be later than the Production OIDC renewal date and prevent renewing first.
Environment
- Symantec VIP Manager
- SiteMinder (SSO)
- OIDC Integration
Cause
The "Renew" button will only be displayed 60 days before the certificate expiration date. The expiration date is directly retrieved from within the signing certificate and cannot be altered.
Resolution
For customers managing both UAT and Production environments, the recommended approach is to renew the UAT certificate one week before the Production token. The goal of this testing is to validate the renewal steps using the newly downloaded certificate in a UAT environment. After Successful completion of this workflow in the UAT environment, the exact same steps can be repeated in Production without any service disruption.
To renew the VIP Manager token and prevent authentication failures, perform the following steps:
- Log in to VIP Manager.
- Navigate to the Account tab and select OIDC Settings.
- Click Renew (Note: Button appears 60 days prior to expiration).
- Download the ID Token Signature and ID Token Hint.
- Access the SiteMinder Admin Console.
- Navigate to Infrastructure > x509 Certificate Management > Trusted Certs and Private Keys.
- Upload the newly downloaded files.
- Apply the updated certificate to the relevant VIP Template Authentication Scheme.
Additional Information:
Additional Information
- The previous token remains valid until the new one is applied, but there is no "undo" button once renewal is triggered in the portal.
- For more information on general account renewals, see .
- Link for SiteMinder Documentation for x509 certificate management.
- To receive updates on this process, subscribe to this article using the steps in .
Feedback
