Learning Forum

[Francis Poussin]

In case you use a self-signed certificate for the Gateway Connector, you may experience the certificate to expire after 1 year.

This will cause the Gateway agent to no more be able to interface with the Active Directory and will prevent operations on Ansys Gateway powered by AWS.

In order o renew the Self-Signed certificate, you need to follow the following steps:

1. Stop and delete existing Ansys.Gateway.AdConnector service

1. To delete it run this in Windows command prompt “sc delete Ansys.Gateway.AdConnector”

2. Run these 2 commands in PowerShell with Admin permissions

1. New-SelfSignedCertificate -DnsName $myDomain -CertStoreLocation "cert:\LocalMachine\My"

1. $myDomain should be the actual domain used for the OU which you created

2. Move-Item -Path "cert:\LocalMachine\My\{thumbprint}" -Destination "cert:\LocalMachine\Root"

1. {thumbprint} should be the actual thumbprint returned from the first PS command

3. Run the install.ps1 command with the new thumbprint to reinstall the service.
1. In a PowerShell window, cd to the ACSAdmin folder and run the install.ps1 command with the followingarguments:
1. -username "username": username for the account to be used to join users and machines to theOrganizational Unit.
2. -password "password": password for the domain join user account.
3. -thumbprint "thumbprint": Specify the thumbprint value that you obtained in the previous step.
   For example:.\install.ps1 -username "domainjoin@company.com" -password "agw123" -thumbprint"b6f70dc3d000791ece744ec67c34eb92cbbe97e0"