Replace the company certificate

Replacing the company certificate is necessary when you want to move an endpoint from one standalone environment to a different one. The endpoint to be moved needs to have the company certificate of the environment it is to be moved to. Otherwise the endpoint does not accept policies of the new environment.

The following prerequisites must be met:

Decide which is your source and which is your target Management Center environment. The source Management Center is the one you used for creating the configuration packages for the endpoints that are to be moved. The target Management Center is the one the endpoints will be moved to.

To replace the company certificate:

  1. Open the target Management Center and select Tools > Options.
  2. Select the Certificates tab and click the Export button under Company Certificate.
  3. Enter and confirm a password for the certificate backup when prompted and select a destination directory and file name when prompted.
    The company certificate is exported (cer file).
  4. Open the source Management Center and select Tools > Options.
  5. Then select the Certificates tab and click Create... in the Request section.
  6. In the Create CCO dialog, browse for the target company certificate you exported in the target Management Center (step 1). Make sure that it is the desired certificate.
  7. Click Create and select a destination directory and file name for the .cco file. Confirm that you want to place a Company Certificate Change Order. Please note that a CCO is not linked to specific endpoints. Using a CCO any client of the source environment can be moved.
  8. In the target Management Center, import the CCO created in the source Management Center.
  9. On the Tools menu, click Configuration Package Tool and select the CCOs tab.
  10. Click Import.
  11. In the Import CCO dialog, select the CCO you created in the source Management Center and enter a CCO name and optionally a description. Click OK.
  12. In the target Management Center, create a configuration package.
  13. On the Tools menu, click Configuration Package Tool > Standalone client packages and add a new configuration package.
  14. Select the imported CCO from the drop-down menu in the CCO column.
  15. Specify a location under Configuration Package output path.
  16. Click Create Configuration package.
    The configuration package is created on the specified location.
  17. Install this configuration package on all endpoints you want to move from the source environment to the target environment.