Replacing the company certificate is necessary when you want to move an endpoint
from one standalone environment to a different one. The endpoint to be moved needs to
have the company certificate of the environment it is to be moved to. Otherwise the
endpoint does not accept policies of the new environment.
prerequisites must be met:
Decide which is your source and which is
your target Management Center environment. The source Management Center is the one
you used for creating the configuration packages for the endpoints that are to be
moved. The target Management Center is the one the endpoints will be moved to.
To replace the company certificate:
Open the target Management Center and select
Select the Certificates tab and click the
Export button under Company
Enter and confirm a password for the certificate backup when prompted and
select a destination directory and file name when prompted.
The company certificate is exported (cer file).
Open the source Management Center and select
Then select the Certificates tab and click
Create... in the Request
In the Create CCO dialog, browse for the target company
certificate you exported in the target Management Center (step 1). Make sure
that it is the desired certificate.
Click Create and select a destination directory and file
name for the .cco file. Confirm that you want to place a Company
Certificate Change Order. Please note that a CCO is not linked
to specific endpoints. Using a CCO any client of the source environment can be
In the target Management Center, import the CCO created in the source
On the Tools menu, click Configuration
Package Tool and select the CCOs tab.
In the Import CCO dialog, select the CCO you created in
the source Management Center and enter a CCO name and optionally a description.
In the target Management Center, create a configuration package.
On the Tools menu, click and add a new configuration package.
Select the imported CCO from the drop-down menu in the
Specify a location under Configuration Package output
Click Create Configuration package.
The configuration package is created on the specified
Install this configuration package on all endpoints you want to move from the
source environment to the target environment.