Updating the ws-federation certificate

You can review and update the ws-federation certificate as required. You must re-import this certificate every ten years.
  1. On a command prompt, run keytool -list -v -keystore .ssokeystore to view the validity dates of the ws-federation certificate.
  2. To update the certificate, create a new certificate for Infor OS or Infor Local Technology Runtime as STS.
    1. From a command line in LSF, run ssoconfig -c and specify the ssoconfig password.
    2. From the main menu of ssoconfig, select Manage WS Federation Settings.
    3. Select Manage WS Federation Certificate.
    4. Select Export WS Federation Certificate.
    5. Specify the file path where the certificate is to be stored and ensure the file name ends with a .cer extension. For example, c:\certs\sts.cer.
      Note: This file serves as a backup.
    6. Select Delete WS Federation Certificate.
    7. Select Create certificate for WS Federation. This action creates the new certificate and saves it in the repository.
    8. To export the new certificate, repeat steps d and e.
    9. Move this certificate to your Infor OS or Infor Local Technology Runtime as an STS system, the location where Infor OS or Infor Local Technology Runtime is hosted. Use your preferred tool to do this.
  3. Update the Lawson SP Connection with the new certificate.
    1. Using the STSAdminUI on the Infor OS or Infor Local Technology Runtime server, select STS Panel > SP Connection.
    2. Open the correct Lawson Portal connection using the pencil icon.
    3. Select the file folder and navigate to the updated certificate you saved from the previous step.
    4. Click the save icon. No server restart is required after making this update.