{"id":391617,"date":"2024-10-28T15:56:10","date_gmt":"2024-10-28T15:56:10","guid":{"rendered":"https:\/\/innovationspace.ansys.com\/forum\/forums\/topic\/how-to-renew-the-self-signed-certificate-for-the-ad-connector-for-ansys-gateway\/"},"modified":"2024-10-29T05:56:37","modified_gmt":"2024-10-29T05:56:37","slug":"how-to-renew-the-self-signed-certificate-for-the-ad-connector-for-ansys-gateway","status":"answered","type":"topic","link":"https:\/\/innovationspace.ansys.com\/forum\/forums\/topic\/how-to-renew-the-self-signed-certificate-for-the-ad-connector-for-ansys-gateway\/","title":{"rendered":"How to renew the Self-Signed certificate for the AD Connector for Ansys Gateway"},"content":{"rendered":"

<p><span style=”font-size: 14pt;”>In case you use a self-signed certificate for the Gateway Connector, you may experience the certificate to expire after 1 year.<\/span><\/p><p><span style=”font-size: 14pt;”>This will cause the Gateway agent to no more be able to interface with the Active Directory and will prevent operations on Ansys Gateway powered by AWS.<\/span><\/p><p><span style=”font-size: 14pt;”>In order o renew the Self-Signed certificate, you need to follow the following steps:<\/span><\/p><\/p>\n

    <li class=”MsoNormal” style=”font-size: 14pt;”><span style=”font-size: 14pt; font-family: Calibri, sans-serif;”>Stop and delete existing Ansys.Gateway.AdConnector service<\/span><\/li>\n<\/ol>\n
      \n
        <li class=”MsoNormal” style=”font-size: 14pt;”><span style=”font-size: 14pt; font-family: Calibri, sans-serif;”>To delete it run this in Windows command prompt “sc delete Ansys.Gateway.AdConnector”<\/span><\/li>\n<\/ol>\n<\/ol>\n
          <li class=”MsoNormal” style=”font-size: 14pt;”><span style=”font-size: 14pt; font-family: Calibri, sans-serif;”>Run these 2 commands in PowerShell with Admin permissions<\/span><\/li>\n<\/ol>\n
            \n
              <li class=”MsoNormal” style=”font-size: 14pt;”><span style=”font-size: 14pt; font-family: Calibri, sans-serif;”>New-SelfSignedCertificate -DnsName $myDomain -CertStoreLocation “cert:\\LocalMachine\\My”<\/span><\/li>\n<\/ol>\n<\/ol>\n
                \n
                  <li class=”MsoNormal” style=”font-size: 14pt;”><span style=”font-size: 14pt; font-family: Calibri, sans-serif;”>$myDomain should be the actual domain used for the OU which you created<\/span><\/li>\n<\/ol>\n<\/ol>\n
                    \n
                      \n
                        <li class=”MsoNormal” style=”font-size: 14pt;”><span style=”font-size: 14pt; font-family: Calibri, sans-serif;”>Move-Item -Path “cert:\\LocalMachine\\My\\{thumbprint}” -Destination “cert:\\LocalMachine\\Root”<\/span><\/li>\n<\/ol>\n<\/ol>\n<\/ol>\n
                          \n
                            <li class=”MsoNormal” style=”font-size: 14pt;”><span style=”font-size: 14pt; font-family: Calibri, sans-serif;”>{thumbprint} should be the actual thumbprint returned from the first PS command<\/span><\/li>\n<\/ol>\n<\/ol>\n
                              <li class=”MsoNormal” style=”font-size: 14pt;”><span style=”font-size: 14pt; font-family: Calibri, sans-serif;”>Run the install.ps1 command with the new thumbprint to reinstall the service.<\/span><\/li>\n
                                <li class=”MsoNormal” style=”font-size: 14pt;”><span style=”font-size: 14pt; font-family: Calibri, sans-serif;”>In a PowerShell <\/strong>window, cd <\/strong>to the ACSAdmin <\/strong>folder and run the install.ps1 <\/strong>command with the followingarguments:<\/span><\/li>\n
                                  <li class=”MsoNormal” style=”font-size: 14pt;”><span style=”font-size: 14pt;”><span style=”font-family: Calibri, sans-serif;”>-username “username”<\/span><\/strong><span style=”font-family: Calibri, sans-serif;”>: username for the account to be used to join users and machines to theOrganizational Unit.<\/span><\/span><\/li>\n

                                  <li class=”MsoNormal” style=”font-size: 14pt;”><span style=”font-size: 14pt;”><span style=”font-family: Calibri, sans-serif;”>-password “password”<\/span><\/strong><span style=”font-family: Calibri, sans-serif;”>: password for the domain join user account.<\/span><\/span><\/li>\n

                                  <li class=”MsoNormal” style=”font-size: 14pt;”><span style=”font-size: 14pt;”><span style=”font-family: Calibri, sans-serif;”>-thumbprint “thumbprint”<\/span><\/strong><span style=”font-family: Calibri, sans-serif;”>: Specify the thumbprint value that you obtained in the previous step.<br><\/span><\/span><span style=”font-size: 14pt; font-family: Calibri, sans-serif;”>For example:.\\install.ps1 -username “domainjoin@company.com<\/a>” -password “agw123″ -thumbprint”b6f70dc3d000791ece744ec67c34eb92cbbe97e0”<\/strong><\/span><\/li>\n<\/ol>\n<\/ol>\n<\/ol>\n","protected":false},"template":"","class_list":["post-391617","topic","type-topic","status-answered","hentry","topic-tag-certificate-1","topic-tag-gateway"],"aioseo_notices":[],"acf":[],"custom_fields":[{"0":{"_bbp_subscription":["45512"],"_bbp_author_ip":["2a01:e0a:5c5:3a80:286f:ad79:12cd:e27e"],"_btv_view_count":["261"],"_bbp_topic_status":["answered"],"_bbp_likes_count":["1"],"_bbp_status":["publish"],"_bbp_topic_id":["391617"],"_bbp_forum_id":["233598"],"_bbp_last_reply_id":["0"],"_bbp_last_active_id":["391617"],"_bbp_last_active_time":["2024-10-28 15:56:10"]},"test":"fpoussin"}],"_links":{"self":[{"href":"https:\/\/innovationspace.ansys.com\/forum\/wp-json\/wp\/v2\/topics\/391617","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/innovationspace.ansys.com\/forum\/wp-json\/wp\/v2\/topics"}],"about":[{"href":"https:\/\/innovationspace.ansys.com\/forum\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":1,"href":"https:\/\/innovationspace.ansys.com\/forum\/wp-json\/wp\/v2\/topics\/391617\/revisions"}],"predecessor-version":[{"id":391677,"href":"https:\/\/innovationspace.ansys.com\/forum\/wp-json\/wp\/v2\/topics\/391617\/revisions\/391677"}],"wp:attachment":[{"href":"https:\/\/innovationspace.ansys.com\/forum\/wp-json\/wp\/v2\/media?parent=391617"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}