Get Even More Visitors To Your Blog, Upgrade To A Business Listing >>

Rotate the expired or nearly expired certificates on your downloadable VHD

To rotate certificates on machines created from the Dynamics 365 for Finance and Operations downloadable VHD, complete the following steps for each Certificate. Sample PowerShell scripts are provided where applicable.
1. Identify which certificates will expire in the next two months.
Get-ChildItem -path Cert:LocalMachineMy | Where {$_.NotAfter -lt $(get-date).AddMonths(2)} | Sort NotAfter | Format-Table Subject, Thumbprint, NotAfter
2. Record the thumbprint of the certificate that needs to be replaced. You will need this in the next step.
3. Obtain a new certificate for the expired certificate.
Set-Location -Path "cert:LocalMachineMy"
$OldCert = (Get-ChildItem -Path )
New-SelfSignedCertificate -CloneCert $OldCert

Note: The thumbprint must be entered without spaces. For more information and an example, see the New-SelfSignedCertificate Powershell documentation.
4. Find and replace all references to the thumbprint of the expired certificate with the thumbprint of the newly created certificate in the configuration files below. These files can be found under C:AOSServicewebroot.
web.config
wif.config
wif.services.config
5. Restart the IIS.
iisreset

Share the post

Rotate the expired or nearly expired certificates on your downloadable VHD

×

Subscribe to Msdn Blogs | Get The Latest Information, Insights, Announcements, And News From Microsoft Experts And Developers In The Msdn Blogs.

Get updates delivered right to your inbox!

Thank you for your subscription

×