How to update the SSL Certificate used by the Certero Tenant.

image-20260224-151321.png

This article only applies to customers who host their own Certero Platform on-premises. It is not applicable to SaaS hosted customers.

If your current Certero SSL certificate is going to expire, you will need to perform two steps.
1. Upload the new SSL certificate to Certero Provisioning.
2. Reconfigure your Certero tenant to use the new certificate.

1. This article explains how to add the new SSL certificate into Certero Provisioning services.
How to add SSL Certificates in Certero Provisioning Services | v8+ - Certero Unified Platform - Certero Documentation

N.B. You must upload the new SSL Certificate into Certero Provisioning Services and not just into IIS Manager. Upgrading Certero involves Provisioning deleting and recreating the Tenant website and any certificate manually bindings will be lost.

2. When the “new” SSL certificate is listed in Certero Provisioning Services. Go to Tenants, and select the Actions menu (three dots) next to your tenant and choose Configure.

image-20260224-150825.png

Then on the Website TAB, under SSL Certificate select to the “new” SSL certificate.

image-20260224-150929.png

Click Save. You will receive a Confirmation warning that tenant will be temporarily unavailable. Click Yes.

image-20260224-151800.png

Your Certero Tenant website will now be reconfigured to drop the “old” SSL certificate and to use the “new” SSL certificate. This process will take a few minutes.

image-20260224-151726.png

Once your tenant is using the “new” SSL certificate. If necessary, the “old” SSL certificate can be deleted from Certero Provisioning Services. Back under Certificates select the Trash can icon to delete a certificate. Provisioning will only allow you to delete SSL certificates that are not in use.