When you replace a Nymi Eval L1 and L2 certificate with a production L1 and L2 certificate, you must run the Nymi Enterprise Server(NES) installation wizard and select the new certificates.

1. From the directory that contains the extracted NES installation package, run ..\NesInstaller\install.exe.
2. On the User Access Control window, click Yes.
3. On the Open File - Security warning window, click Run.
4. On the left navigation pane, click Location, and then perform the following steps.
   1. In the Install Root field, confirm that the path to the NES services is correct, as it was specified during the initial deployment.
      The default location is C:\inetpub\wwwroot.
   2. In the Instance Name field, type the descriptive name that was specified during the initial deployment for the NES web application instance name. For example, NES. See Configuration Attribute Values in the Nymi Connected Worker Platform—Deployment Guide.
      Note: Ensure that the values that you specify in the Install Root and Instance Name match the values that you specified when you deployed the previous version of NES. When the values that you specified in the Install Root and Instance Name are correct, the Location test results will show Install Type: Update/ Re-Install. If there is no match for the values entered, the Location test results will show New Installation for the Install Type. The following figure provides an example of the Location window for an NES upgrade.

      Figure 1. Update / Reinstall installation type
5. In the left navigation pane, select IIS, and confirm that values that appear are correct.
6. Review the contents of the Enterprise tab, and confirm that values that appear are correct.
7. In the left navigation pane, click Certificates, and perform the following actions.
   1. From the Level One Certificate list, select the L1 certificate from the list.
      The L1 certificate name is in the form enterprise_name NES L1 CA.
   2. From the Level Two Certificate list, select the L2 certificate.
   3. For NES 1.14.2 and later, from the Full Chain list, click the ellipses (...) and navigate to the folder that contains Full Chain PFX certificate file, and then select the file.
   4. For NES 1.14.2 and later, in the Password Required pop-up, type the Full Chain certificate password, and then click OK.
   The following figure provides an example of the Certificates page.

   Figure 2. Certificates page in the NES Setup wizard
8. In the left navigation pane, click Database, and confirm that values that appear are correct.
9. In the left navigation pane, click Review Settings. The parameters for the NES installation are displayed for final review. Click Test to verify the configuration. Review the test results and address any errors if applicable.
10. In the left navigation pane, click Install, and then click Update.
    Note: If the update option is not available, the Install Root or Instance Name fields on the Location tab are not the same values that were specified when you deployed the previous NES version.
11. On the Update NES window, click Yes to reapply the configuration.
    The Install window display the status of the update process.
12. When the Install window displays the Installation Complete message, close the Nymi Setup window.