Installing a New Self-Signed Certificate

1. Log into the KeyControl Compliance Manager webGUI with your standard account credentials.
2. In the top right, click the Switch to Appliance Management link.

3. In the top menu bar, click Cluster.

4. Click the Servers tab and select a KeyControl Compliance Manager node.

   Note: You can use a different certificate on each KeyControl Compliance Manager node. In this case, however, Entrust recommends that all of the certificates be signed by the same Certificate Authority.

5. Select Actions > Use Self Signed Certificate.

6. Select the web server on which the self-signed certificate is to be installed.

7. Click Proceed at the prompt.

   If you select the external web server, KeyControl Compliance Manager restarts the web server. This may interrupt the browser connection to the KeyControl Appliance Management webGUI. When the restart is finished, you are returned to the KeyControl Appliance Management webGUI login page.

   Tip: If you are using IE, you may receive an alert stating that revocation information for the certificate is not available. Click Yes to acknowledge the alert and restart the web service. If you are using Chrome and you receive a series of connection errors when the web service restarts, open the KeyControl Appliance Management webGUI login page in a new tab.

8. If you want to verify that the new certificate was properly installed, select the node and click the link next to Internal/External web server.