Generating SSL Certificates
SSL certificates on a Cisco Instant Connect server expire after 10 years and must be replaced. Complete the following instructions to manually generate SSL certificates on a Cisco Instant Connect server.
This procedure automatically restarts the Cisco Instant Connect server software. Perform this procedure only when restarting the Cisco Instant Connect server software will not interrupt critical operations.
To generate SSL certificates, perform the following procedure.
Step 1 Use a secure shell (SSH) client to log in to the Cisco Instant Connect server using the root account.
Step 2 Enter these commands to generate new SSL certificates:
[root]# cd /opt/cisco/ipics/security
[root]# sudo -u ipicsadmin ./security-manager unsetup
[root]# sudo -u ipicsadmin ./security-manager setup
[root]# service ipics start
Step 3 Wait a few minutes for the Cisco Instant Connect server software to restart.
Step 4 Log in to the Administration Console again and verify that the server operates correctly.
Note If your web browser displays an error regarding the certificates, go to the browser certificate management page and delete the old trusted certificates.