IPO 11.1 - root certificate expired / SSA can't connect to IPO

[john3voltas]

Greetings folks.
I have an IP Office server which has had it's certificate expired.

I can access the server with Manager but I can't open SSA pointing to this server. And even if I could, I'd like to fix this properly and have an encrypted connection between this App and the server.

So, it is my understanding that during the lifetime of the certificate I could have easily renewed it from the Security Settings > System > Certificates > Regenerate. But that is not working right now and I guess it's because the cert is already expired.
So, how do I renew this certificate? Or is there an easy way to create a self-signed certificate to workaround this issue?
Please be so kind to explain in detail or point me to a good source (tutorial/how-to) on how to solve this.
Thanks in advance.

Cheers

 

[Westi]

You would have to go into the preferences of Manager and set it to secure but none as certificate check
or even unsecured by turning off the security which will work if you have it set to allow unsecured in the security settings of the IPO


Joe
FHandw, ACSS, ACIS

https://www.millsidetc.com/

 

[john3voltas]

@Westi,
As stated in my previous post, "And even if I could, I'd like to fix this properly and have an encrypted connection between this App and the server.".
Thanks for pointing me a way to immediately workaround my problem.
But what about a way to fix the certificate issue? Any ideas?
Anyone?
TIA
Cheers

 

[Westi]

Once you have connected without the security enabled you can renew the certificate and be on your way just as usual.

Joe
FHandw, ACSS, ACIS

https://www.millsidetc.com/

 

[john3voltas]

Hi Westi,

Well, I've done that already. But I still see a certificate that expired in September...
Tried it both from Manager under Security and also from the Web Management. Same outcome.
What could I be doing wrong, here?
Cheers

 

[john3voltas]

By the way. It says it needs to restart a service in order for the newly created CA certificate to be imported into the IPO trusted certificate store.
Which service is that? And do I need to restart it manually or does the system take care of that for me?
TIA
Cheers

 

[Westi]

We are talking about this certificate??

I have never had to reboot the system after refreshing this.

Joe
FHandw, ACSS, ACIS

https://www.millsidetc.com/

 

[john3voltas]

Yes, that certificate.
When I press the VIEW button I can see that the certificate already has an expiry date of 2026.
But, when I open the web browser again and point it to

https://ipo_ip_address:7070

I still get an information stating that the certificate is expired. And when I get more info for that certificate from the browser, I can see that it is still only valid until 2023.
Cheers

 

[john3voltas]

I've just restarted the WebManager service from the command line of the server and still no good...
Could it be that I need to restart the whole server...?
Cheers

 

[Westi]

This is a server edition?
I was under the impression that is is only a regular IPO not a SE

when in doubt a reboot cannot hurt.

Joe
FHandw, ACSS, ACIS

https://www.millsidetc.com/

 

[john3voltas]

Yes, this is a server edition. A virtual server edition, actually.
I'll arrange for a scheduled reboot and will let you know how it goes.
Thanks for the tips.
Cheers

 

[john3voltas]

Nah, there's something fishy going on with my server.
Went back to check the VIEW button and the certificate is gone back to expiry in september 2023.

I'm going to regenerate right now, under the web management.

Here it says there's the need for a service restart. But it doesn't explain if it will restart the service on it's own nor does it say which service that is...

Success. Now I have to download it and add it to my browser.
That would be the Download DER, right?

Ok, then I open Manager, go to Security.

But still 2023...

I am lost...

 

[john3voltas]

Okay.
An update.
I went back to the WebManager and pressed both Regenerate buttons. First the one on the top. Let it finish and give me back control. And then the one on the bottom.

This time it said IT was going to restart all services on the server.

I had a green light so I let it restart.
The browser window froze for a couple of minutes.

Afterwards I regained control and checked the services. All restarted EXCEPT for the IP Office service. Cool.

Then I pressed both Download DER buttons, one for the CA and one for the certificate.
And last but not least, I added both (maybe it was only needed to add the CA...) to the windows computer account.

And there it is, the browser is saying that communications are encrypted.

Now I'm going to check if everything is working properly. VM Pro, OneX portal, etc.

Thanks for the headsup.
Cheers

 

[IPOTS]

Upgrade. Takes care of all cert issues.

https://ipoffice-techsolutions.com/