Product manual

27
9.3.2 Importing the New Certificate
The new certificate needs to be placed in the Local Machine\Personal store before it can be used.
1. Launch the Microsoft Management Console (MMC):
o Windows Server 2003: Start -> Run -> Type “mmc.exe” and press the “Enter” key
o Windows Server 2008+: Start -> Type “mmc.exe” and press the “Enter” key
2. Add the Certificates snap-in:
o Windows Server 2003:
Click “File” -> “Add/Remove Snap-in” -> “Add” button
Select “Certificates” from the list
Click the “Add” button
Select “Computer account”
Click “Next”
Select “Local computer”
Click “Finish”
Click “Close”
Click “OK”
o Windows Server 2008+:
Click “File” -> “Add/Remove Snap-in”
Select “Certificates” from the left-hand column
Click the “Add >” button
Select “Computer account”
Click “Next”
Select “Local computer”
Click “Finish”
Click “OK”
3. Optionally save the snap-in for future use (“File” -> “Save”)
4. Select the “Certificates (Local Computer)” -> “Personal” node in the tree
5. Right-click -> “All tasks” -> “Import”
6. Follow the Import Wizard, taking care to place the certificate in the “Personal” certificate store location
7. Double-click the certificate and make sure the line “You have a private key that corresponds to this certificate” is displayed
9.3.3 Replacing the ESA Certificate
NOTE: The ESA Core Authentication service will not start up without a certificate configured. If you remove the certificate, you must
add another before the Core service will run correctly.
Determine the correct certificate to use:
1. Open the MMC Certificates Manager using the steps above
2. Find the certificate you wish to use in the “Personal” folder and double-click it
3. Make sure you see “You have a private key that corresponds to this certificate” on the “General” tab
4. On the “Details” tab, select the “Thumbprint” field
5. The certificate thumbprint is displayed in the bottom pane (sets of two hex digits separated by spaces)