8.4 Migrating the External Certificates

To migrate the external certificates on Service Desk from an earlier version to the latest version:

  1. Back up the Keystore, CSR, and the certificates signed by the CA which includes the root certificate, intermediate certificate, and your server certificate.

  2. Back up the server.xml file and paste the changes which was done in the previous release to the latest version of Service Desk server.xml file.

  3. Upgrade to latest version of Service Desk.

    For information, see Section 4.0, Upgrading the Micro Focus Service Desk.

  4. Place the keystore file, CSR, and certificates in the same location after upgrade.

  5. Update the server.xml file for SSL which was done pre-upgrade.

  6. Restart the Service Desk services and check the HTTPS connection.

8.4.1 Migrating the External Certificates from Service Desk 7.2 or earlier Appliance Versions

To migrate the external certificates from Service Desk 7.2 or earlier appliance versions:

  1. Back up the following files from the old appliance and the CA provider:

    • server.key

    • server.cer (or other base-64 format)

    • intermediate.cer / subca.cer

    • rootca.cer

  2. Copy the server.key, server.cer, intermediate.cer subca.cer, and rootca.cer files to the new appliance.

  3. Run the following command to combine the intermediate and rootca certificate files:

    cat intermediate.cer rootca.cer > ca-certs.cer

  4. Run the following command to create a PKCS12 keystore based on the existing key and certificates:

    openssl pkcs12 -export -in server.cer -inkey server.key -chain -CAfile ca-certs.cer -name "my-domain.com" -out servicedesk.p12

    IMPORTANT:Ensure to use a password to protect the keystore.

  5. Run the following command to convert the PKCS12 keystore to a Java keystore:

    keytool -importkeystore -destkeystore servicedesk.jks -srckeystore servicedesk.p12 -srcstoretype PKCS12

  6. Configure the server.xml to point to servicedesk.jks as specified in the Section 8.3, Configuring the SSL Connector.