Agent for SharePoint Guide › Advanced Options › How to Replace the Certificates for your CA SiteMinder Trusted Identity Provider › Replace the Certificates on your Servers

Replace the Certificates on your Servers

Replace the expired certificates on the following computers:

• The computer hosting your SharePoint central administration server.
• Any computers hosting a web front end (WFE) for your SharePoint environment.

Follow these steps:

1. Perform the following steps on the computer hosting your SharePoint central administration server:
   1. Remove the expired CA-certificate (root certificate) from the computer.
   2. Copy your new CA-certificate (root certificate) to the computer.

      Note: Record this information for future use in your Windows PowerShell script.

   3. Remove the expired signing certificate from the computer.
   4. Copy your new signing certificate to the computer.

      Note: Record this information for future use in your Windows PowerShell script.

2. Perform the following steps on a computer hosting a web front end (WFE) server in your SharePoint environment:
   1. Remove the expired CA-certificate (root certificate) from the computer.
   2. Copy your new CA-certificate (root certificate) to the computer.

      Note: Record this information for future use in your Windows PowerShell script.

   3. Remove the expired signing certificate from the computer.
   4. Copy your new signing certificate to the computer.

      Note: Record this information for future use in your Windows PowerShell script.

3. Repeat Step 2 for all web front end (WFE) servers in your SharePoint environment.

   The certificates on your computers have been replaced.