Show Hide

 

Feedback

  • Contents
 

Overview of the Process

The procedures to use a Third-Party signed certificate within the PureConnect applications is not complex; it is just a matter of generating new Certificate Signing Requests (CSRs) and importing the Signed Certificate, Private Key back into the system. The steps below walk you through the process:

  1. Start the PureConnect Certificate Setup Assistant Wizard on the IC Server to generate the Certificate Signing Requests (CSR) and import the Signed Certificate, Private Key, and Root CA (Trusted Certificate Authority (CA) Certificate back into the IC System.
  1. New stand-alone Certificate UI utility on ALL other Off Host IC Subsystems (Media Server, RCS, Off Host Session Manager, and so on) to generate new Certificate Signing Requests (CSR) and import the Signed Certificate, Private Key, and Root CA (Trusted Certificate Authority (CA) Certificate back into the IC System using GenSSLCertsU.exe command-line utility.
  1. Use GenSSLCertsU.exe command-line utility on ALL other Off Host IC Subsystems (Media Server, RCS, Off Host Session Manager, and so on) to generate the CSR and import the Signed Certificate, Private Key, and Root CA (Trusted Certificate Authority (CA) Certificate back into the Media Server or other Off Host IC sub-system

Note:  During the initial installation of the PureConnect Interaction Center system and other Off Host Sub-systems, you may be prompted to select an option to use SHA-1 or SHA 256 (SHA-2) certificates.  You MUST select the SHA 256 (SHA-256) option.

Note: It is highly recommended to use the New stand-alone Certificate GUI application to generate Certificate Signing Requests (CSR) so that the process is quicker and less error-prone. For more information, see CSR Tool User's Guide

Note: For Internal Testing purposes, it is highly recommended to use the Default IC Self Signed Certificate process done at the initial installation of PureConnect to validate that you have a fully functional IC System that you have verified that everything is up and running and switchover is fully functional before performing any other certificate work. That also means that the Media Server and any other Peripheral Off Host IC Sub-systems have been installed, Trusted, and functionality tested before you are satisfied that you have a fully functional IC system, then you can proceed with generating a new CSR for the Third Party Signed Certificate Mode use and then continue with any subsequent updating of the PureConnect Certificates.