Increase the SSO metadata certificate private key size
Increase the SSO metadata certificate private key size
How to change the existing SSO metadata certificate to have a bigger private key?
Step-by-step guide
You can use ubikt application to create new key, generate certificate request and after getting signed certificate, import that to unix/win32.config
- Generate new key
java -jar ubikt.jar -ubilogin win32.config -generate -keysize 2048 - Create certificate request
java -jar ubikt.jar -ubilogin win32.config -request -subject "CN=idp.example.com,O=Example Org,C=ex" - Send CSR to CA for signing
- Certificate import
java -jar ubikt.jar -ubilogin win32.config -import newcertificate.cer - Run setup
ubilogin\setup.cmd - Update secrets
import.cmd secrets.ldif - Re-deploy applications to tomcat
tomcat\update.cmd
Related articles
, multiple selections available,
Related content
Change SSO metadata certificate
Change SSO metadata certificate
Read with this
Change SSO metadata certificate for SSO 8.9.x onwards
Change SSO metadata certificate for SSO 8.9.x onwards
Read with this
Production environment SSL certificate - SSO
Production environment SSL certificate - SSO
More like this
CertAP upgrade - SSO
CertAP upgrade - SSO
More like this
CertAP upgrade on Windows - SSO
CertAP upgrade on Windows - SSO
More like this
CertAP upgrade on Linux - SSO
CertAP upgrade on Linux - SSO
More like this