Centrify

Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-39604: Can the Tenant CA/IWA root certificate that is generated during the on premise PAS installation be replaced?

Privileged Access Service ,  

11 August,20 at 08:02 PM

Question:
Can the Tenant CA/IWA root certificate that is generated during the on premise PAS installation be replaced?

Answer:
Unfortunately while it is possible to replace the other certs that are generated at install time, there is no way to replace the tenant CA/IWA root cert.
This cert gets used to generate a number of things internal to the tenant that make replacing it problematic.

Related Articles

 articleKB-20210: Common Questions Regarding Centrify DirectControl and CoreOS articleCentrify 17.4 and 17.4 Hotfix Release Notes articleCentrify 21.2 Release Notes article[How To] Enable Symantec VIP MFA for Centrify Server Suite on Linux Part II article[How To] Enable Symantec VIP MFA for Centrify Server Suite on Linux Part I articleCentrify 18.7 Release Notes articleKB-7555: Unable to login as root after upgrade to Centrify Suite 2016 (CDC 5.3.0) articleKB-6041: How to show current license type in use by adclient articleKB-6040: How to change the license type in use after adclient successful joined to the AD?