Apple Mac OS X Server (Version 10.6 Snow Leopard) - Manual (Page 71)

Chapter 4 Enhancing Security 71
5 Click Save.
Renewing an Expiring Certificate
Certificates have an expiration date and must be renewed periodically. Renewing a
certificate is the same as replacing a certificate with a newly generated one with an
updated expiration date.
To renew an expiring certificate:
1 Request a new certificate from the CA.
If you are your own CA, create one using your own root certificate.
2 In Server Admin in the Server list, select the server that has the expiring certificate.
3 Click Certificates.
4 Select the Certificate Identity to renew.
5 Click the Action button and select “Replace Certificate with Signed or Renewed
Certificate.”
6 Drag the renewed certificate to the sheet.
7 Click Replace Certificate.
Replacing an Existing Certificate
If you change the DNS name of the server or any virtual hosts on the server, you must
replace an existing certificate with an updated one.
To replace an expiring certificate:
1 Request a certificate from the CA.
If you are your own CA, create one using your own root certificate.
2 In Server Admin in the Server list, select the server that has the expiring certificate.
3 Click Certificates.
4 Select the Certificate Identity to replace.
5 Click the Action button and select “Replace Certificate with Signed or Renewed
Certificate.”
6 Drag the replacement certificate to the sheet.
7 Click Replace Certificate.
Using Certificates
In Server Admin, services like Web, Mail, VPN, and so on display a pop-up list of
certificates that the administrator can choose from. The services vary in appearance
and therefore the pop-up list location varies. Consult the administration guide for the
service you’re trying to use with a certificate.