Administrator Guide

g In the Password and Conrm Password boxes, type a password. This password must match the password that was used to
protect the private key of the certicates that you want to import.
2 Run the Set-SslCerticate runbook to update to the new trusted certication authority certicate. The SSL certicates must be
provided as .pfx les, and must include a private key protected by a password. The runbook takes the following parameters:
Table 39. Set-SslCerticate Runbook Parameters
Input Parameter Details
ComputerNames You must specify the computer names in JSON format.
• To update the certicates on both VMs, specify:
["< Prex >APA01" , "< Prex >-APT01"]
• To update the certicates on a single VM, specify:
["< Prex >APA01"] or ["< Prex >APT01"]
Fileshare The UNC le share that you created in the previous procedure to store the
new .pfx certicates; for example, \\< Prex >CON01\ImportCerts.
PFXCredential The name of the PowerShell Credential asset that you created in the rst
step of this procedure; for example, CertImport.
NOTE: Each time that you run the runbook, even if the runbook has a status of Completed, make sure that you check the output
for errors.
Step 6: Secure the shares that you created
You should take steps to secure the shares where you stored the certicate information. Or, alternately, you can remove sharing completely,
if so desired.
You can now:
• Archive these les to a dierent location, or
• Delete the les after conrming that all new certicates are working, that is, administrators and tenants are able to sign in and work in
their Windows Azure Pack management portals.
The shares where you stored certicate information were:
• \\<Prex>CON01\WapCerts
• \\<Prex>CON01\TCAShare
• \\<Prex>CON01\ImportCerts.
Updating certicates about to expire
To update certicates that are about to expire, follow the procedures described in Replacing self-signed certicates with CA-signed
certicates.
Security
133