1. Nymi
  2. Troubleshooting
  3. CWP 1.3

Replacing the L1 and L2 Certificates

Updated
Debbie Redmond

The Nymi solution requires L1 and L2 certificates to support secure communications. Nymi delivers the L1 and L2 certificates in a fullchain PKCS12 file, which has an expiration date. You must replace the certificates before the expiration date, to continue to use the Nymi solution.

The PKCS12 file (fullchain.p12) contains the following key and certificates.

  • L1 certificate
  • L2 certificate
  • L2 private key
Note: Nymi provides these file in a zip file that is protected by a password. Nymi provides the password to you separately from the file package.
Perform the following steps to replace the certificates:
  • Delete the existing L1 and L2 certificates.
  • Importing the Nymi-provided full chain certificate.
  • Provide the Application Pool Identity account with access to the private key.
  • Restart the IIS.
  • Deleting Existing Certificates
    Perform the following steps to delete the L1 and L2 certificates.
  • Importing Certificates
    Perform the following steps to import the certificates on the NES host.
  • Managing Private Keys
    If the account used for the NES IIS Application Pool is not LocalSystem, perform the following procedure to grant Application Pool Identity account access to the L2 private key.
  • Moving the L2 Certificate
    Perform the following steps to move the L2 certificate from the Personal store to the Intermediate Certification store.
  • Restarting IIS
    Use an account with administrative privileges to restart IIS.
  • Updating Certificates in Nymi Enterprise Server
    When you replace a Nymi Eval L1 and L2 certificate with a production L1 and L2 certificate, you must run the Nymi Enterprise Server(NES) installation wizard and select the new certificates.
Parent topic: Resolving certificate issues

Articles in this section

See more
Was this article helpful?
0 out of 0 found this helpful
Share

Comments

0 comments

Please sign in to leave a comment.