Certificate Management Utility

The Certificate Management Utility is a web application that allows an administrator to maintain the server's security certificate for File-AID Services. This certificate is self-signed with an expired Not Valid After date, which can cause browsers to issue a server security certificate error when attempting to view a report. Although the error can be safely ignored and the report displayed, at least two options are available to prevent the error from recurring: install your own certificate or adjust the existing certificate.

Installing Your Own Certificate

You can either purchase and install a certificate from a certificate authority (CA) or create and install your own self-signed certificate . If a new certificate is installed and the CA that issued the certificate is trusted by your browser, the certificate errors will no longer occur. If necessary, contact your site's security administrator for assistance in installing your own self-signed certificate.

To generate an SSL Certificate Signature Request (CSR) and obtain a new certificate:

1. In your browser's Address field, enter the URL https://<your File-AID Services>:3081/diagnostic where <your File-AID Services> is the path to your site's server. If a security certificate error occurs, click the option to continue.
2. When prompted, enter a User Name and Password to connect to File-AID Services. The default for both is cwsecadmin. The Certificate Management Utility appears showing certain JVM statistics and disk drive information.
3. On the left side menu, click Update Server Certificate. CSR fields and values are listed on the lower part of the screen.
4. Verify the Valid For Host and Alias List values, making any revisions required.
5. Click the GET CSR button. Submit the text generated in the field below to request a signed SSL certificate from a Certificate Authority (CA), then continue with the steps below..

To install a new certificate:

1. If necessary create and store a new self-signed certificate.
2. After the new certificate has been received and stored, click the BROWSE button.
3. Navigate to and select the new certificate file, then click Open.
4. Optionally click the PREVIEW button to display the certificate fields and their values.
5. Click the UPDATE button to install the new certificate in the File-AID Services certificate store.

Adjusting the Existing Certificate

You can adjust the self-signed certificate to be up to date and to represent the host on which File-AID Services is installed, but even after adjustment, certificate errors may still occur because the browser cannot verify a self-signed certificate issuer’s identity. However, after the certificate has been adjusted, you can install it in a local certificate authority or in the trusted store of the browser. After installation, your browser will no longer issue certificate errors because you have indicated the certificate is trusted by the installation. If necessary, contact your site's security administrator for assistance.

To adjust File-AID Services security certificate:

1. In your browser's Address field, enter the URL https://<your File-AID Services>:3081/diagnostic where <your File-AID Services> is the path to your site's server on which File-AID Services is running. If a security certificate error occurs, click the option to continue.
2. When prompted, enter a User Name and Password to connect to File-AID Services. The default for both is cwsecadmin. The Certificate Management Utility appears showing certain JVM statistics and disk drive information.
3. On the left side menu, click Update Server Certificate. Certificate fields and their values are listed on the upper part of the screen.
4. Click the ADJUST button. The values for Not Valid Before and Not Valid After will be adjusted to the current date and the same date five years later, respectively. When File-AID Services is restarted, the adjusted certificate will be used.
5. Again enter the URL from step 1 in your browser's Address field, click the option to continue, and enter credentials to connect to File-AID Services.

6. Use your browser facility to view and install the adjusted certificate in your local certificate store.