hollisorama Posted January 15, 2015 Report post Posted January 15, 2015 I have a site with 2 management points running ConfigMgr 2012 SP1 CU3. One of the management points is also the Site Server. The certificates for both of these servers will expire in April so I have a bit of time to figure this out. What is the proper procedure for updating the certificates that are about to expire? Is the only place I need to be concerned about updating IIS? Should I reissue the cert with the same key or different key or should I issue a new certificate with the same key or different key? Your experience is appreciated. Quote Share this post Link to post Share on other sites More sharing options...
Ath3na Posted January 15, 2015 Report post Posted January 15, 2015 I have not had to do this yet but I guess you would just need to request a new web server cert. http://sccmguy.com/2013/11/26/pki-certificates-for-configuration-manager-2012-r2-part-1-of-4-web-server-certificate/ Plus the client cert for distribution points, all dp's can use the same one. http://sccmguy.com/2013/12/12/pki-certificates-for-configuration-manager-2012-r2-part-34-distribution-points/ Quote Share this post Link to post Share on other sites More sharing options...
hollisorama Posted January 15, 2015 Report post Posted January 15, 2015 Thanks Ath3na. I had seen that site too. It seemed straight forward. I just wondered if anyone had done it before and if everything went smooth or if there were any catches. I was concerned that if the certificates got messed up that my clients would not download policy anymore. Quote Share this post Link to post Share on other sites More sharing options...
Peter van der Woude Posted January 15, 2015 Report post Posted January 15, 2015 It indeed shouldn't be to difficult anymore. As long as you're not changing anything at the root certificate level, it should be simply adjusting the certificates in IIS. Quote Share this post Link to post Share on other sites More sharing options...
hollisorama Posted January 15, 2015 Report post Posted January 15, 2015 The root is staying the same. Thanks for you response. Quote Share this post Link to post Share on other sites More sharing options...
