Ask a Question

Solution ID : SO10700

Replace SSL certificate within Symantec Trust Center Enterprise

Solution

To replace your SSL certificate within Symantec Trust Center Enterprise, perform the following steps.

Replace your SSL certificate in Symantec Trust Center Enterprise.

  1. Log in to the Enterprise Trust Center account.
  2. Enter your Username and Password > click Sign-In
    Note: If you do not remember your Username or Password, refer to this solution.
  3. From the SSL Certificates tab list, select the appropriate certificate to replace
  4. Under the Order Summary tab, click Replace
  5. Verify the certificate details > click Continue
  6. In the Reason for revoking this certificate list, select the appropriate reason > Agree to the terms and click Continue
  7. Generate a new Certificate Signing Request (CSR) from the Web server matching the same information as the original certificate. This includes the following fields:
    • Organization
    • Organizational Unit
    • Common Name
    • Country
    • State
    • City/Locality
       
  8. For instructions on generating a CSR on a specific server platform, refer to this article.
  9. Select the Server Platform
  10. Paste the CSR contents into the text box
  11. Click Continue
  12. Agree to the Subscriber Agreement > click Submit
     

Note: If the SSL certificate contains any Subject Alternative Name (SAN) and you wish to change any of the SAN values, please note the following:

  • Any or all SAN values can be changed.
  • You will have the ability to add additional SANs to a certificate mid-term.
  • When you replace a certificate, we will no longer immediately revoke your existing certificate. This gives you time to install the new replacement certificate.
  • The Subject Alternative Name (SAN) limit for certificate enrollment, renewal and replacement has increased from 20 to 50 SAN entries.
  • Changes can be made to the hostname and/or domain of the common name and SAN values for the lifecucle of the certificate. To qualify for a free replacement
      the domain must be registered to the account with an "Authenticated" status.