Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 14 Next »


Generating a New Signed Certificate


You’ll first need to generate a CSR to be signed by your chosen Certificate Authority.

  1. Navigate to the System > Certificate Management page in ZPC and then to the Generate CSR tab.

  1. Generate and download the CSR to get it signed by your chosen Certificate Authority (CA).

  2. Ensure the signed certificate is in PEM format (Base-64 encoded X.509 - CER).

  3. Navigate to the System > Certificate Management page in ZPC and the Import Certificate tab and select the Signed Certificate option.

  4. SSH into the ZIRO machine and log in using the s8admin account, then select Restart Web Server from the menu.

  5. Log back into ZPC from your browser and confirm the certificate has been successfully imported by checking the validity period.

You’re done!

Renewing an Existing Signed Certificate

Warning - SAML SSO configuration changes required when renewing SSL certificate

Updating the ZIRO SSL certificate will break the existing SAML Single Sign-On functionality setup for ZIRO and will require adjustments to your Identity Provider (IdP) configuration.

Once a new SSL certificate is uploaded, users will be unable to sign in using SSO until you export the new Service Provider (SP) Metadata from the SAML Single Sign-On page and use it to adjust the Relying Party Trust configuration for ZIRO in your Identity Provider (IdP) configuration.

For more detailed steps, refer to the walkthrough guide Setting Up SSO for ZPC with ADFS.

  1. View the expiry date of your certificate by navigating to System Health > System Health Status page.

  2. View your current certificate details by accessing the certificate viewer in your browser while on the ZPC website.

  1. Generate and download the CSR using the information in the previous step to get it signed by your chosen Certificate Authority (CA).

  2. Ensure the signed certificate is in PEM format (Base-64 encoded X.509 - CER).

  3. Navigate to the System > Certificate Management page in ZPC and the Import Certificate tab and select the Signed Certificate option.

  4. SSH into the ZIRO machine and log in using the s8admin account, then select Restart Web Server from the menu.

  5. Log back into ZPC from your browser and confirm the certificate has been successfully imported by checking the validity period.

How to Use Wildcard Certificates

  • No labels