/
Increase the SSO metadata certificate private key size
Increase the SSO metadata certificate private key size
How to change the existing SSO metadata certificate to have a bigger private key?
Step-by-step guide
You can use ubikt application to create new key, generate certificate request and after getting signed certificate, import that to unix/win32.config
- Generate new key
java -jar ubikt.jar -ubilogin win32.config -generate -keysize 2048 - Create certificate request
java -jar ubikt.jar -ubilogin win32.config -request -subject "CN=idp.example.com,O=Example Org,C=ex" - Send CSR to CA for signing
- Certificate import
java -jar ubikt.jar -ubilogin win32.config -import newcertificate.cer - Run setup
ubilogin\setup.cmd - Update secrets
import.cmd secrets.ldif - Re-deploy applications to tomcat
tomcat\update.cmd
Related articles
, multiple selections available,
Related content
Change SSO metadata certificate
Change SSO metadata certificate
More like this
Change SSO metadata certificate for SSO 8.9.x onwards
Change SSO metadata certificate for SSO 8.9.x onwards
More like this
Key rotation - SSO
Key rotation - SSO
Read with this
Update the SSO signing and encryption key
Update the SSO signing and encryption key
More like this
"Access to the requested resource is denied" with Suomi.fi authentication (SSO 8.9.x)
"Access to the requested resource is denied" with Suomi.fi authentication (SSO 8.9.x)
Read with this
Install Tomcat server certificate
Install Tomcat server certificate
More like this