-
Self Service Password Management
 

How to install existing PFX Certificate?

Description

This article will help you use your existing PFX certificate file while deploying SSL in ADSelfService Plus.

Resolution

Step 1: Enable SSL in ADSelfService Plus.

 
  • Navigate to Admin --> Product Settings --> Connection
  • Select Enable SSL Port [https] check-box and click Save

Step 2: Stop ADSelfService Plus.

  • Start --> All Programs --> ADSelfService Plus --> Stop ADSelfService Plus
  • If you have installed ADSelfService Plus as a service, then stop the service (Start --> Run --> type Services.msc --> Stop ManageEngine ADSelfService Plus)

Step 3: Export PFX/PKCS12 certificate file

  • Export and save your PFX/PKCS12 file under <installation_dir>\conf (By default: C:\ManageEngine\ ADSelfService Plus\ conf) folder

Step 4: Edit Server.xml file to include the wildcard certificate

  • Now open the server.xml file present in <installation_dir>\conf folder in a text editor of your choice
  • Go to the end of the XML file and search for the connector tag (that starts like, <Connector SSLEnabled=”true” ……/>)
  • Now, edit the following values inside that connector tag:
    • keysotreFile=”./conf/
    • keystorePass=”
    • keystoreType=”PKCS12”

E.g.: <Connector SSLEnabled="true" acceptCount="100" clientAuth="false" connectionTimeout="20000" debug="0" disableUploadTimeout="true" enableLookups="false" keystoreFile="./conf/YOUR_CERT_FILE.pfx" keystorePass="PASSWORD" keystoreType="PKCS12" maxSpareThreads="75" maxThreads="150" minSpareThreads="25" name="SSL" port="443" scheme="https" secure="true" sslProtocol="TLS"/>

Step 5: Start ADSelfService Plus.

More Knowledge Base Aritlces>>

Salient Features of ADSelfService Plus
Self Service Reset Password

Self Reset Password

Free Active Directory users from attending lengthy help desk calls by letting them self-service the password reset task. Password reset just a click away with ADSelfService Plus!
Self Service Unlock Account

Self Unlock Account

Free Active Directory users from lengthy help desk calls with ADSelfService Plus's self-account unlock option. Unlocking an account with ADSelfService Plus is child's play!
Password/Account Expiry Notification

Password/Account Expiry Notification

Intimate Active Directory users of their impending password/account expiry by mailing them these password/account expiry notifications.
Corporate Directory Search

Corporate Directory Search

A quick search facility that enables Active Directory users to scout for information about peers by using search keys like phone no., e-mail id, first/ last name of the personality being searched.
Automatic Password Reset/ Account Unlock

Automatic Password Reset/ Account Unlock

Free Active Directory users of 'remembering account/password expiry' issue with 'automatic password reset/account unlock' feature that automates password reset/account unlock task for users.