Replace the SSL Certificate of Web Client

Before you begin

Install Plant Applications Web Client.

About this task

When you install Plant Applications using Docker, a self-signed certificate for the Web Client applications is created so that you can access Web Client using HTTPS. For better security, we recommend that you replace this self-signed certificate with one issued by a trusted CA authority.
Note: Only .pem (with certificate and private key included) files are supported.

Procedure

  1. Access the wcrepair.sh file in the uc-ansible-installer folder.
  2. Provide execution permissions to the wcrepair.sh file by running the following command: sudo chmod +x <path to the installer>/uc-ansible-installer/wcrepair.sh
  3. Run the wcrepair.sh file by running one of the following commands:
    • If you want to run this utility directly on the Web Client node: <path to the installer>/uc-ansible-installer/sudo ./wcrepair.sh -l -ssl reset
    • If you want to run this utility remotely on the Web Client node: <path to the installer>/uc-ansible-installer/sudo ./wcrepair.sh -r -ssl reset
  4. If you run this utility remotely, enter the details of the Web Client node.
    A message appears, asking you to enter the path of the new SSL certificate.
  5. Enter the path of the new SSL certificate.
    /home/administrator/myca_certs/new_cert.pem
    The existing SSL certificate is replaced with the certificate that you have provided.