I’m still new to bigfix and it was setup by another admin who no longer here. Are there any documentation on how to rotate webUi certs to enable sha-384?
Try using the BES Support Task:2558 Rotate WebUI Certificates.
@itsmpro92 thanks for your response. I have try that and it give me an error “host specified maybe not be originally inputted”
and there is 0 action history for that task.
any idea of what might of causes this?
it also show my root server is applicable as well.
Take a look at the hostname in the current WebUI Certificate and use that for the hostname on the Task input.
The Task will be relevant to any server that has the webui service present. You may have an environment with more than one WebUI server installed. If so you want to make sure you’re only running only one WebUI server at a time.
@itsmpro92 found it, and one problem! the server was hosted from another site but it relocated to my facility. We rename the the server to fit our environment, if I input the old server name would that mess anything up?
in that case, I think your best option would be to use the Task 2557: Remove WebUI Service and target that machine and your root server if it is also applicable, and then proceed with your sha-384 enablement. Afterwards, you can reinstall the WebUI (that matches your BigFix version) on your preferred server. That will create a new certificate during the install.
1 Like