Re-applying certificates - BlueCat Integrity - 26.1.0

Address Manager Administration Guide
ft:locale
en-US
Product name
BlueCat Integrity
Version
26.1.0

Quickly re-apply your custom certificates if enabling/disabling HTTP or HTTPS or if you need to re-authenticate replaced servers on your network.

Note:
  • You must already have a certificate loaded in Address Manager in order to re-apply certificates.
  • Use the Re-applying certificates function to quickly modify the state of HTTP and HTTPS.

To re-apply a self-signed or custom certificate:

  1. Select the Settings tab in the sidebar.
  2. Under System security, select Web access.
  3. Set the following parameters:
    Note: When replication is configured between Address Manager servers, web access settings for primary and standby servers are represented on separate tabs.
    • HTTP enabled—select the checkbox to enable HTTP. Deselect the checkbox to disable HTTP.
    • HTTPS enabled—select the checkbox to enable HTTPS.
    • HTTP to HTTPS redirection enabled—select the checkbox to enable HTTP to HTTPS redirection. The HTTP enabled checkbox must be selected to select this option.
      Important: You can't disable HTTPS if HTTP is configured to redirect to HTTPS.
      Note: HTTP to HTTPS redirection
      Selecting HTTP to HTTPS redirection enabled will redirect users to HTTPS if they attempt to access Address Manager using HTTP. You must have HTTP and HTTPS enabled to use HTTP to HTTPS redirection.
      • If the Address Manager domain name is configured to resolve to an IPv6 address, HTTP to HTTPS redirection enabled will redirect the domain name in the URL to an IPv6 address, resulting in an unknown certificate warning in your browser. For more information, refer to knowledge base article 5978 on BlueCat Customer Care.
    • X509 authenticator—select an X.509 authenticator previously added to Address Manager. For more information, refer to X.509 authentication.
  4. Under Server certificate settings, complete the following:
    • Certificate method—select Reapply certificates.
  5. In the Change control section, add comments if required.
  6. Select Update web access settings.
  7. In the Warning window, select Update and restart BAM. The Address Manager server will be temporarily unavailable as the changes are committed and the server restarts.

Result:

  1. Login to Address Manager once the configuration is compete.
    Note: After modifying HTTP or HTTPS, your browser might warn you about an unknown or invalid certificate. This warning will cease once you accept the certificate and log in to Address Manager.
  2. From the certificate warning, proceed to the site. Depending on your browser, this might entail clicking a button or creating an exception.