Update an HTTPS identity with a new Grid-signed certificate

At some point the existing HTTPS certificates will expire, or the keys have been compromised and must be changed. This function substitutes the existing HTTPS certificate for an HTTPS identity with a new Grid-signed HTTPS certificate. If a certificate signed by an external CA is used, instead submit a new certificate signing request (CSR) to that CA.

Note: The grid monitors the validity of grid-signed HTTPS certificates, and automatically renews them when they approach expiration. For externally signed certificates that approach expiration, a notification is issued.
  1. Start the Grid Management Pages and log on as a member of the grid-admin role.
  2. Click on Security in the top menu.
  3. Click on the Identities tab.
  4. Select the HTTPS identity to generate a new Grid-signed HTTPS certificate for.
  5. Click on the Update Certificate link.
  6. Click on Create Grid Signed Certificate.
  7. Fill in the information needed in the new certificate. The Host FQDN is required but the rest is optional depending on the deployment scenario. The Host FQDN and alternate names should be pre-filled with the values of the existing SSL certificate for the Identity. See Create a new HTTPS identity with a Grid-signed certificate (step 9) for more information about the alternate names.
  8. Select the expiration date of the certificate.
  9. Click on the Create button.