Updating Latest Certificate for Business Apps

One of the certificates that are stored in Adeptia Truststore (cacerts) is used to authenticate third-party business applications. This certificate needs to be updated before the existing certificate expires i.e.27th Aug 2023 as there will be no handshake with the business applications without an updated certificate. This post guides you on how to place the new certificates in the Truststore.

This certificate is present in both the Connect Portal and Connect Server's Truststore (cacerts). The latest certificates Root, Intermediate and Domain(adeptia_com.crt) are attached to this forum post.

Follow the steps below to update the certificates into the Truststore of both Connect Portal and Connect Server for all the nodes.

Adding new certificate:

• Download the Root, Intermediate and Domain Certificate(adeptia_com.crt) files. These files are attached to this forum post and contain the new certificate. 
• Open the command prompt.
• Goto ".…<AdeptiaConnect-3.x>\ConnectServer\jre\bin".

Import the certificates into the Connect Portal and the Connect Server as well.

Connect Portal Location: "..\..\..\..\ConnectPortal\truststore\cacerts"

Connect Server Location: "..\..\AdeptiaConnect-3.x\ConnectServer\AdeptiaServer\ServerKernel\etc\truststore\cacerts"

• Run the command below to import the certs into the Truststore. Make sure that the alias name is not "server". 

keytool -import -file "<<path_to_Certificate_file>>" -alias certname -keystore "..\..\AdeptiaServer\ServerKernel\etc\truststore\cacerts"

Below is an example of the same command:

keytool -import -file "E:\certificates\adeptia_com.crt" -alias server1 -keystore "..\..\AdeptiaServer\ServerKernel\etc\truststore\cacerts"

• Type the Keystore password. The default password for Truststore is changeit.
• Click Yes to trust this certificate.

A confirmation message displays "Certificate was added to Keystore" once the new certificate is added.

Removing the existing Expired certificate only after Expiration:

As a best practice, we recommend removing the expired certificates from the Truststore of both Connect Portal and Connect Server.

Follow the steps below to remove the Expired certificate from the Truststore after 27th August 2023.

• Open Command Prompt.
• Go to …<AdeptiaConnect-3.x>\ConnectServer\jre\bin.
• Run the following Keytool command to remove the certificate from the Truststore:

keytool -delete -alias server -keystore "..\..\AdeptiaServer\ServerKernel\etc\truststore\cacerts"

• Type the Keystore password. The default password for Truststore is changeit.
• This will remove the existing certificate.

Note: The existing (adeptia.com) certificate present in the cacerts has the alias name "server". Do not use this alias name to add the adeptia.com certificate in cacerts as it will override the existing certificate.