Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

 How to change the Ubisecure SSO metadata certificate?

Step-by-step guide

Unix.config/win32.config has suffix.pfx field that contains base64 encoded certificate.pfx which is crypted with master.secret key. 

...

  1. Linux: base64 -w 0 certificate.pfx > certib64.pfx
  2. Edit unix.config/win32.config to contain this new certificate.
  3. Execute the following commands: (adjust accordign to linux paths)
    cd /d C:\Program Files\Ubisecure\ubilogin-sso\ubilogin 
    setup.cmd  
    cd ldap 
    adam\import.cmd secrets.ldif
  4. If import secrets fails, it means that the certificate is too big for the ldapmodify application. Connect to the Ubilogin Directory with an LDAP client application, such as ADSI Edit and add certificate manually to CN=Server,OU=System,CN=Ubilogin,DC=host object, attribute ubiloginPKCS12 
  5. cd /d C:\Program Files\Ubisecure\ubilogin-sso\ubilogin\tomcat\update 
    update.cmd

Filter by label (Content by label)
showLabelsfalse
max5
spacesKNB
showSpacefalse
sortmodified
reversetrue
typepage
cqllabel in ("certificate","sso") and type = "page" and space = "KNB"
labelscertificate sso

...