Increase the SSO metadata certificate private key size
How to change the existing SSO metadata certificate to have a bigger private key?
Step-by-step guide
You can use ubikt application to create new key, generate certificate request and after getting signed certificate, import that to unix/win32.config
- Generate new key
java -jar ubikt.jar -ubilogin win32.config -generate -keysize 2048 - Create certificate request
java -jar ubikt.jar -ubilogin win32.config -request -subject "CN=idp.example.com,O=Example Org,C=ex" - Send CSR to CA for signing
- Certificate import
java -jar ubikt.jar -ubilogin win32.config -import newcertificate.cer - Run setup
ubilogin\setup.cmd - Update secrets
import.cmd secrets.ldif - Re-deploy applications to tomcat
tomcat\update.cmd
Related articles