Certificate change

Share your tips or issues concerning the WAPT Console or WAPT Agent here
Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
Locked
elelay
Messages: 27
Registration: Oct 20, 2020 - 12:39

January 8, 2021 - 5:05 PM

Hello,

We just changed our certificate, and the old one expires on January 14th, so I have a few days to work on renewing it.

I've already changed the certificate on the web server and generated a new agent. I've also configured the console to use this new certificate.

I imagine I need to redeploy the agent since it's signed with this new certificate. Isn't it possible to do this from within wapt-upgrade?
What about the certificate deployed by wapt-deploy? Will it be replaced?
I also noticed that the packages in my repository are signed with the old certificate.
Will I have to download/regenerate all the packages?

I should also mention that deployment via GPO with wapt-deploy isn't ideal for us; we have to wait until the PCs are properly connected to the network before starting the installation. This can sometimes take a very long time... doesn't wapt-deploy check if the agent is installed?

Thank you for any help you can provide.

Sincerely,

Etienne Le Lay
WAPT Server version: 2.0 Enterprise
Console installed on a Windows Server 2019
Debian 10 Buster server
User avatar
t.heroult
Messages: 307
Registration: December 8, 2020 - 10:13 AM

February 16, 2021 - 4:12 PM

Hello,

I can answer your question about waptdeploy.
It does check the already installed version to determine whether or not to run the setup.
That's why there's a "--force" option to force the setup, even if the same version is already installed.
Server: WAPT Enterprise 2.6.1.17786 on Debian
Consoles: Windows 10 & 11
Infrastructure: Windows

Did you know? When parrotfish undergo smoltification, their osmoregulation mechanism is reversed!
Locked