PeopleSync Knowledge Base
PeopleSync Knowledge Base
Breadcrumbs

Update the SSL Certificate in IIS for the PeopleSync Frontend

This guide walks you through the process of updating the SSL certificate in Internet Information Services (IIS) for the PeopleSync Frontend.

Prerequisites

Before proceeding, ensure you have:

  • Administrative access to the server hosting PeopleSync.

  • The new SSL certificate file (typically .pfx or .cer).

  • A backup of the current IIS configuration and PeopleSync settings.

Step-by-Step Instructions

1. Import the Certificate into the Windows Certificate Store

Only import the new certificate, if it is not already in the certificate store.

  1. Press Windows + R, type mmc, and press Enter.

  2. In the Console window, go to File > Add/Remove Snap-in.

  3. Select Certificates, click Add, choose Computer account, then click Next > Finish > OK.

  4. In the left pane, expand Certificates (Local Computer) > Personal > Certificates.

  5. Right-click Certificates, then choose All Tasks > Import.

  6. In the Certificate Import Wizard:

    • Browse to your .pfx or .cer file.

    • If prompted, enter the password for the private key.

    • Choose Place all certificates in the following store and ensure it’s set to Personal.

  7. Click Finish and confirm the import was successful.

2. Open IIS Manager

  1. Press Windows + R, type inetmgr, and press Enter.

  2. In the left-hand Connections pane, expand the server node and click on Sites.

  3. Select the PeopleSync site hosting the PeopleSync frontend.

3. Bind the New Certificate

  1. In the Actions pane on the right, click Bindings.

  2. In the Site Bindings window, select the https entries and click Edit.

  3. In the Edit Site Binding dialog, from the SSL certificate dropdown, choose the new certificate.

  4. Click OK, then Close the Site Bindings window.

  5. Repeat for all https entries.

4. Restart IIS

To apply the changes:

  • In the Actions pane, click Restart under Manage Website.

  • Or run the following command in an elevated Command Prompt:

iisreset

5. Verify the Update

  • Open a browser and navigate to the PeopleSync URL (e.g., https://peoplesync.example.com).

  • Click the padlock icon in the address bar to view certificate details and confirm the new certificate is active.

Troubleshooting Common Issues

❌ Website Not Loading After Update

  • Check bindings: Ensure the HTTPS binding is correctly configured with the new certificate.

  • Certificate trust: Verify the certificate is trusted by the server and includes the correct intermediate certificates.

🔒 Certificate Not Showing in Dropdown

  • The certificate must have a private key and be installed in the Personal store of the Local Computer.

  • Use mmc.exe to inspect the certificate store and confirm installation.

⚠️ Browser Shows Old Certificate

  • Clear the browser cache or try accessing the site in incognito/private mode.

  • Restart IIS and ensure no other bindings are referencing the old certificate.

🧾 Event Viewer Logs Errors

  • Check the System and Application logs in Event Viewer for SSL or Schannel errors.

  • Look for Event ID 36885 or 36887 for certificate-related issues.