Identity server certificate

The Identity server certificate must be updated using Procuro on the Primary SQL server. To update your Relativity identity server certificate, complete the following steps.

This procedure updates only the identity server certificate (RelativityIdentityCertificate). The cookie signing certificate is a separate certificate with its own update procedure. For more information, see Cookie signing certificate.

  1. Log in to the primary SQL server using the Relativity Service Account.

  2. Access the Procuro directory (for example, C:\Program Files\kCura Corporation\Relativity\Procuro).

  3. Launch kCura.EDDS.Procuro.exe as administrator.

  4. Click the Back button.

  5. Click Update Certificate.

    Before you click Update Certificate, select Generate New Certificate or select RelativityIdentityCertificate in the certificate list. Procuro uses the selected certificate as the identity server certificate. If you select the cookie signing certificate by mistake, authentication fails.

  6. Click Next.

  7. Close the Procuro window.

  8. Delete the old certificate from the SQL server or servers.

  9. Reboot all Web and Agent servers.

  10. Restart the Relativity services on the Queue Manager server.

  11. If your environment uses Data Grid, restart the Data Grid Control nodes.

Restarting the Relativity services on the Web and Agent servers is not enough. A service restart does not guarantee that the servers reconnect with the new certificate. You do not need to restart the Secret Store server.

Once complete, Relativity will configure a new Identity Certificate for the environment and will invalidate all authentication sessions.

Feedback