Server group certificate and private key

CIC servers require a server group certificate and private key for secure communications with remote subsystems such as ASR servers and web servers. During the CIC server installation, a server group certificate authority file and a server group private key file are automatically created in the \I3\IC\Certificates\ServerGroup directory on the CIC server.

Switchover pairs must use identical server group certificates and private keys to connect remote subsystems successfully to both the active server and the backup server.

From the Certificate Signing Option screen, select Sign intermediate and child certificates with Certificate Authority installed on your IC server.

The Server Group Certificate and Private Key screen appears.

To configure the active server and the backup server for the server group certificate and private key, perform the following instructions.

Configure the initial active server

1. Select the first option if this CIC server is the initial active server. No further configuration is necessary. IC Setup Assistant uses the server group certificate and private key that you automatically generated during the CIC server installation.

   

   Note:
   If you plan to use a third-party certificate authority, do not select this option. Select the second option instead so you can securely copy your own server group certificate and private key files to the initial active server.

2. Click Next to continue with IC Setup Assistant.

Configure the initial backup server

1. Select the second option if this CIC server is the initial backup server.

   

2. Click Next. Securely copy the server group certificate and private key from the initial active server to the initial backup server by using the next dialog box.

   Note:
   If you plan to use a third-party certificate authority, select this option and click Next. Then securely copy your own server group certificate and private key files to the initial backup server by using the next dialog box.

Server group certificate and private key locations

The following dialog box appears if you selected the second option in the Server Group Certificate and Private Key Locations dialog box.

Configure the initial backup server

To securely copy the server group certificate and private key files from the initial active server to the initial backup server using a USB key, complete this procedure.

1. With IC Setup Assistant set on this dialog box, insert the USB key in the initial active server.

2. Navigate to the \I3\IC\Certificates\ServerGroup directory on the initial active server.

   Note:
   If you are using your own server group certificate and private key, navigate to your preferred directory locations for the server group certificate (ServerGroupCertificate.cer) and server group private key (ServerGroupPrivateKey.bin).

3. Copy the entire \I3\IC\Certificates\ServerGroup directory to the USB key.
   
   If you are using your own server group certificate and private key, copy the server group certificate and private key you want to use to the USB Ejectkey.

4. the USB key from the initial active server.

5. Insert the USB key into initial backup server.

6. In the Server Group Certificate and Private Key Locations dialog box, click Import Certificates. The Import Certificate dialog box opens.

   

7. Navigate to the locations of the server group certificate and private key files on the USB key in the Certificate Path and Private Key Path boxes, for example:

   F:\ServerGroup\ServerGroupCertificate.cer

   F:\ServerGroup\ServerGroupPrivateKey.bin

   Keep the default Type and Format settings. Setup Assistant backs up the existing certificate/private key files before overwriting them.

   Note:
   If you are using your own server group certificate and private key, specify the Type and Format information, and whether the private key is password protected.

8. Click OK.

   The Server Group Certificate and Private Key Locations dialog box appears. It shows the paths of the server group certificate and private key files on the USB key that are copied to this CIC server.

   

9. Continue with IC Setup Assistant until it completes. The server group certificate and private key files are copied from the USB key to the CIC server during the Commit process.

10. Eject the USB key from the initial backup server.

11. Store the USB key in a secure location for backup purposes.

Troubleshooting

Do not manually copy the server group certificate and private key files from the designated existing CIC server to this CIC server. This method can lead to errors.

If errors occur, rerun IC Setup Assistant and follow the procedure described in this section. For errors due to certificates, see the PureConnect Knowledge Base article How to Correct a Certificate Issue in a Switchover Pair.