Administrator Guide
Input Parameter Details
StoreName Possible values include:
• Root
Use this for the Trusted Root Certication Authorities store.
• CA
Use this for the Intermediate Certication Authorities store
• MY
Use this for the Personal store.
Step 4: Prepare the le share with the new .pfx certicates
Prerequisites
• Before you do this step, make sure that the new certicates are in .pfx le format. If not, you can use the Certicates snap-in
(Certmgr.msc) to convert them. For more information, see TechNet article Export a certicate with the private key (http://
technet.microsoft.com/library/cc737187(v=ws.10).aspx).
• Make sure that you know the password that was used to protect the private key.
Procedure
1 On the Console VM, create a le share; for example, \\<
Prex
>CON01\ImportCerts. Make sure that the <Prex>-System account
has Read/Write permissions.
2 Do either of the following:
• If you are using one wildcard certicate for both VMs, and it is registered at the domain level (for example, *.contoso.com), go to
the step 3.
• If you are using certicates that are registered at the website level, copy the folder tree from the share that you created in Step 1
to this new share, and then use the guidance in the next step to replace the existing .pfx les in the folder tree with the new ones.
You could also create a similar folder tree in the new share, instead of copying the folder tree.
3 Prepare the \\<
Prex
>CON01>\ImportCerts le share with the new .pfx certicates. You can specify only one .pfx le per folder.
Depending on the certicates that you have, do one of the following:
• If you have a wildcard certicate for the domain (for example, *.contoso.com), you only need to copy the .pfx le to the share,
for example:
\\<Prex>CON01\ImportCerts\contoso.com.pfx. This layout is the quickest way to update all websites with the same
SSL certicate.
• You can also add the .pfx les at the VM level. For example:
\\<Prefix>CON01\ImportCerts
\MgmtSvc-AdminAPI
\<Prefix>APA01
CF75D3CAE126353B0700F9820ECBA0F67F75001C.pfx
\MgmtSvc-AdminSite
\<Prefix>APA01
CF75D3CAE126353B0700F9820ECBA0F67F75001C.pfx
\MgmtSvc-AuthSite
<Prefix>APT01
CF75D3CAE126353B0700F9820ECBA0F67F75001C.pfx
\MgmtSvc-Monitoring
\<Prefix>APA01
CF75D3CAE126353B0700F9820ECBA0F67F75001C.pfx
\MgmtSvc-TenantAPI
\<Prefix>APA01
CF75D3CAE126353B0700F9820ECBA0F67F75001C.pfx
Security
131