Renew the company certificate

A company certificate that is about to expire can be renewed in SafeGuard Management Center. At logon, the SafeGuard Management Center starts to display a warning six months before the company certificate expires. Without a valid company certificate an endpoint cannot connect to the server. Renewing the company certificate involves three steps:
  • Creating a Certificate Change Order (CCO).
  • Creating a configuration package including the CCO.
  • Restarting the servers and distributing and deploying the configuration packages on the endpoints.

To renew a company certificate:

  1. In the SafeGuard Management Center menu bar, select Tools > Options.
  2. Select the Certificates tab and click Update in the Request section.
  3. In the Update Company certificate dialog, enter a name for the CCO and specify a backup path. Enter a password for the P12 file and retype it. Optionally enter a comment and click Create.
  4. Confirm when prompted that this change cannot be reverted and that all configuration packages created after this company certificate update need this CCO included to work on already installed endpoints.
  5. Confirm when prompted that the update was successful and that a CCO to be included in all configuration packages has been created. Click OK.
  6. On the Tools menu, click Configuration Package Tool.
  7. Select Managed client packages.
  8. Click Add Configuration Package and enter a name of your choice for the configuration package.
  9. Assign a Primary Server (the Secondary Server is not necessary).
  10. Select the CCO you created beforehand to update the company certificate.
  11. Select the Transport Encryption mode defining how the connection between SafeGuard Enterprise Client and SafeGuard Enterprise Server is to be encrypted, either SafeGuard transport encryption or SSL encryption.
    The advantage of SSL is that it is a standard protocol and that a faster connection can be achieved than when using SafeGuard transport encryption. SSL encryption is selected by default. For further information on how to secure transport connections with SSL, see Securing transport connections with SSL.
  12. Specify an output path for the configuration package (MSI).
  13. Click Create Configuration Package.
    If you have selected SSL encryption as the Transport Encryption mode, the server connection is validated. If the connection fails, a warning message is displayed.

The configuration package (MSI) has now been created in the specified directory. Make sure that you restart all SGN servers. You now need to distribute and deploy this package to the SafeGuard Enterprise managed endpoints.