Page 1 of 1

Managing outdated administrator certificates

Published: March 19, 2025 - 10:24
by erems
Hello everyone,

I'm reaching out to the community for advice: what is the recommended procedure when a WAPT administrator leaves the company, particularly regarding their certificate?

Currently, we're leaving all the certificates deployed for fear of issues with anything signed using them.

This doesn't seem ideal. Is there a better way?
Thank you.
Best regards.

Re: Managing outdated administrator certificates

Published: March 19, 2025 - 10:38
by sfonteneau
Hello,

it's quite simple.

If you delete the certificate of the departing admin, then someone else must take over responsibility for the package and therefore re-sign it.

Console -> right-click on a package -> resign packages

Re: Managing outdated administrator certificates

Published: March 19, 2025 - 1:47 PM
by erems
Thank you!

So, in detail:
- we resign each package (in each installed version) from the departing administrator
- we deactivate their WAPT account
- we remove the outdated certificate from the certificate deployment package
- we delete the outdated certificate package from each client.

Is that correct?

I just tested "Console -> right-click on a package -> resign packages" on one of our packages. This created a "clone" of the package with my name, but the one signed by the former admin still exists, and it's still that package that clients see as installed.

Thank you.