Configure your MID Server for automatic certificate renewal

Collect information about root certificates stored outside your server. Create a specialized Discovery schedule.

Avant de commencer

Role required: pki_admin or admin

Pourquoi et quand exécuter cette tâche

Configure your MID Server to renew certificates automatically by setting the configuration parameters in your MID Server.

For information about version compatibility and troubleshooting, see the Renewal of TLS certificates using AI Agents for Discovery knowledge article [KB2470998] in the Now Support Knowledge Base. The Certificate Inventory and Management on Yokohama Patch 8 or later supports the certificate renewal agent.

Procédure

1. Navigate to All > Mid Servers.
2. Select the MID Server that you want to configure.
3. Select the Configuration Parameters tab.
4. Add a new parameter by selecting New.
5. Select the Parameter name field.
6. Select ext.vault.hashicorp.address
7. In the Value field, enter your external Hashicorp vault address.
   The default value is http://127.0.0.1:8200.
8. Select Submit
9. Add a new parameter.
   1. Select New.
   2. Select the Parameter name field.
   3. Select ext.vault.hashicorp.path
   4. In the Value field, enter your file path in the Hashicorp vault.
   5. Select Submit.
10. Navigate to the location of your host name of the MID Server
    1. Navigate to the IP address in the IP address field of your MID Server record.
    2. Navigate to the MID Server installed folder where you installed your MID Server.
    3. Select the agent/config.xml file.
    4. Add the parameter ext.vault.hashicorp.token in your cofig.xml file.
    5. Insert the following code: <parameter name="ext.valut.hashicorp.token" secure="true" value="<YOUR TOKEN VALUE>"/>
    6. Restart your MID Server.

Résultats

Your MID Server is configured for automatic certificate renewal.

Que faire ensuite

To complete the process of configuring yourself for automatic certificate renewal, you must complete the required steps to Add the required applications and capabilities to your MID Server and Configure System Properties for automatic certificate renewal.