Import a certificate

When you install or upgrade to Data Archive 2017, or later, the setup program generates and stores a self-signed certificate. If you want to replace this certificate with your own certificate on a primary or secondary member, open PI Collective Manager on that computer and use the Import Certificate option, as described here.

Note: A password might be required to access the certificate in your store.

All imported certificates must meet the following requirements:

• Have a private key

• Be configured for both client authentication and server authentication

• Have the key usage options for digital signature and key encipherment enabled

  Note: You can also use the Import Certificate option to verify and import a self-signed certificate that you have regenerated by using the Microsoft MakeCert tool.

1. Open PI Collective Manager on the computer where you want to import the certificate.

2. Right-click the member and choose Import Certificate.

3. Navigate to the certificate file and select it.

4. If a password prompt opens, enter your password.

   If PI Collective Manager verifies your certificate, it updates this collective member and sends the certificate keys to update all other collective members.