Updating SSL Cert for GSRECTRAC2 or IIS server
This document will explain where and how to recertify the SSL cert for GSRECTRAC2.
In the email from GoDaddy they will explain that the certification for GSRECTRAC2 will be up shortly and you will need to take action. Click the link in the email to Read these detailed instructions to have a guide to help you get though the verification section of the Cert renewal.
***These Steps are not going to work***
HTML Verification way:
1. Open GSRECTRAC2 server
2. Create a .HTML document and name it godaddy
3. Copy and paste the unique ID found in the email from GoDaddy into the .HTML document
4. Place that document in this location on the server: R:\VSI3\RecTrac\WebServer\GUI\.well-known\pki-validation
5. Verify that it is showing up by going to https://gsrectrac2.corp1.ci.glenwood-springs.co.us/.well-known/pki-validation/godaddy.html
6. On the SSL Cert page of the GoDaddy website click button to "Check HTML"
7.?Its verified?
NOTE: This didn't work for me, but I may have missed something
DNS Record Verification way:
1. Create a TXT record on NS2 & NS3 (Linux)
2. Call GoDaddy and give them reference number: 91518418 (This is their note on our account that will help them understand that they need to manually verify and approve ownership of domain)
After Verified Domain Ownership:
1. Open IIS on the GSRECTRAC2 server, and select the GSRECTRAC2 Server
2. Open "Server Certificates"
3. Click "Create Cert Request" (right panel)
4. Fill out info (specify date of cert in name) and select 2048bit on second screen
5. Take the Cert Request you have created (copy & paste) it in the "Rekey" drop down on the GoDaddy SSL page for GSRECTRAC2
***NOTE: This will likely need to be reverified again, so another call to GoDaddy * May not have to, try without see if existing key works*
6. Once verified again, download the new Cert from the GoDaddy SSL page (Download IIS 10 .ZIP)
7. Unzip IIS zip file
8. In IIS folder look for .crt file (look in properties of file to see extension)
9. Double click .crt file, and open
10. On details tab, "copy to file"
11. Opens wizard, click next
12. Use DER encoded binary x.509 (.CER)
13.Save it to location
14. complete certificate request (user Personal as Cert store)
15. Next, navigate to Sites>VSI3_CLIENT (on GSRECTREC2 server)
16. Select "Bindings" (right panel)
17. Restart IIS web server from VSI3_Client home page (Right panel)
18. Update the HTTPS option, and change the SSL Cert to the new one you have updated and renamed with the new coverage dates.
19. Open the RecTrac website and verity that the SSL Cert is now covered for the new dates specified by GoDaddy.