AD Connectors distributed before 12:00 PM on January 8, 2020 contain a CA certificate that expires on February 9, 2020. We apologize for the inconvenience, but to ensure encrypted communication via TLS, please renew the CA certificate using the steps below by February 9, 2020. If this is not done, the Active Directory integration feature will stop working.

• Due to system constraints, the AD Connector does not use the root certificate registered in the OS. For this reason, the CA certificate must be registered with the JRE used by the AD Connector.

This script stops the AD Connector service (Stop-Service), imports the certificate into the keystore (keytool -importcert), and then starts the AD Connector service (Start-Service).

Important Notes

• If multiple AD Connectors are installed, you must renew the CA certificate on all of them.
• During this procedure, the AD Connector service will be stopped and logins will not be possible, so please perform this task outside of business hours.
• AD Connector synchronization will resume automatically once the certificate import is complete.

Steps

Step 1

Download the PowerShell file "update-certificate.ps1".

Step 2

Copy the file "update-certificate.ps1" downloaded in Step 1 to the folder where the AD Connector is installed.

Step 3

Right-click the file "update-certificate.ps1" and run it.

Step 4

Once a message like the one below appears, the task is complete. Please close the displayed window.

Step 5

Open Windows Task Manager and check that the status of "skuid ad connector" is "running."

Also, please confirm that you can log in to TrustLogin using your Active Directory ID and password.