Resolution:
Description:
= = = = = = =

Effects on established EMS client connections when EMS server certificates expire and the procedure to replace the expired certificates with valid certificates.

Environment:
= = = = = = =
ALL

Resolution:
= = = = = =

Certificate information is exchanged between clients and EMS servers during the SSL handshake phase of connection establishment. Once the full connection is established it will not be affected in the event the EMS server certificate expires. However, new clients will not be able to establish a SSL connections with the EMS server until they are replaced with valid ones. After applying the new certificates, the EMS server should be cycled so that the new certificate can be applied.

The following procedure details how to replace the expired certificates.

1). Make a copy of the original tibemsd.conf file from production, place in a test environment and apply the new certificates.

2) To verify the new certificates launch the EMS server and a client from the test environment and confirm whether an SSL connection can be established. Note: If the root certificate is not changed, there should not be any changes on the client side.

3) Once it is confirmed that the new certificates are working in the test environment, move the certificates and the tibemsd.conf from the test environment back to production.

Keywords/Tags:
= = = = = = = =
SSL certificate expiration

Procedure to replace expired CA SSL certificates in EMS server.