Skip to content

How to refresh certificate?

Request a new certificate

  1. Generate a Certificate Signing Request (CSR) and private key.

Refer to: https://cisco.sharepoint.com/Sites/SSLCertificates/SitePages/CSR%20Generation%20%20Apache%20%20Openssl.aspx

refresh_cert_1.png

Then you can get key and csr file like:

refresh_cert_2.png

2. Apply a new SSL Certificate

You can request in https://sslcerts.cisco.com/sslrequest

Refer to: https://cisco.sharepoint.com/Sites/SSLCertificates/SitePages/SSL%20Certificate%20Request%20Process.aspx#jive_content_id_Generate_CSR

After leader approve, you will receive mail of request finished. 3 files will attach in the link from email.

refresh_cert_3.png

  1. Download new Certificate(3 files) in the pem format

refresh_cert_4.png

4. Reimport new certificate on AWS|ACM for us-east-1 and us-east-2

Refer to: https://docs.aws.amazon.com/acm/latest/userguide/import-reimport.html

a. Click "Reimport certificate"

refresh_cert_5.png

b. File "Certificate body" (copy from certificate pem file in step3), file "Certificate private key"(copy from status.webex.com.key file in step1), and file "Certificate chain"(copy from content combination of three files: 'Certificate+Issuing CA+Root CA'). Click "Review and import"

refresh_cert_6.png

5. Check if SSL certificate is updated

refresh_cert_7.png

NOTE: For service status api certificate, don't forget to upgrade it on both Virginia and OHIO. It caused INC0046231 when primary service-status.webex.com is down.