Applies to Centrify Identity Platform

Question:

How to update the self-signed host certificate for Centrify Privileged Access Service?

Answer:

There are 2 places that will require to update the host certificate to a self signed one:

1. Update the host certificate on Centrify Privileged Access Service Server:

     a. Navigate to C:\Program Files\Centrify\Centrify Identity Platform\Scripts and run update_host_cert.ps1 as administrator in powershell
        

     b. Select the host certificate that you configured or configured according to KB-7871 then input the password
         

2. On Cloud Admin Portal:

     a. Navigate to Settings > Network > Cloud Connectors > Click the desired cloud connector
         
             
        Note: If you have more than one connector, please enroll unique certificates base on each connector machine. Instructions can be found at KB-7871.

     b. Press "Upload" and pick the host certificate that you configured previously and input the password accordingly        
         

     c. Click Save to take effect

For instructions in configuring the self-signed certificate for Centrify Privileged Access Service, please check KB-7871
For instructions in enrolling Centrify Agent on Linux, please check KB-7973
For instructions in enrolling Centrify Toolkit on Linux, please check KB-7968 (Deprecated since 16.12)