How to install .pfx certificate manually in ServiceDesk Plus MSP version 10.5 and above

How to install .pfx certificate manually in ServiceDesk Plus MSP version 10.5 and above


The below steps are applicable for version 10.5 and above. For .pfx certificate installation in version 9427 and below, follow the steps here

NOTE: Please take a server snapshot before following the steps given below

A PKCS12 (.pfx) certificate stores the RSA keys and the SSL certificate in a single encrypted file..
Follow these steps to install the certificate manually:

1. Stop the application. 
2. Copy the PKCS12 (.pfx) file to ManageEngine\ServiceDeskPlus-MSP\conf\.
3. Switch the application to the secure mode by changing the webserver port to 443 by following the below steps 

3a. Stop the application 
3b. Open Command Prompt as Admin
3c. Go to ManageEngine\ServiceDeskPlus-MSP\bin
3d. Invoke command changeWebServerPort.bat [newportnumber] [Protocol http or https]

Refer below screenshot 




4. Go to  <installation directory>\conf\ and take a copy of server.xml  in a different location and open the server.xml file in a text editor present in <installation directory>\conf\.

  • Locate the Connector SSLEnabled="true" string, insert keystoreType="pkcs12" and replace the following attributes with values as shown:

 

Attribute 
Value
keystoreFile
conf/<your file name>.pfx
keystorePass

For versions earlier than 10.5, type your plain text password as is.

For versions 10.5 and later, paste the encrypted password.




How to encrypt your password in ServiceDesk Plus MSP

1. Open Command Prompt as Admin
2. Go to ManageEngine\ServiceDeskPlus-MSP\bin
3. For versions 10.5 and later, run:
encrypt.bat -a aes256 -v <your password>

The encrypted password will be displayed in the next line. 


5. Start the app

                    New to ADSelfService Plus?

                      • Related Articles

                      • How to install SSL certificate of .PFX format for 9.4 builds

                        Installing .PFX Certificate   .PFX is an extension for security certificate. It defines a file format that stores private keys (generated by your server at the time the CSR was generated) and public key certificate (your SSL Certificate provided by ...
                      • SSL Installation

                        Do you have a Wildcard or a Multi-domain certificate already running in your other servers and want to reinstall in on ServiceDesk Plus server ?, then click here to find how to export SSL certificate using MMC.  Do you already have a .PFX certificate ...
                      • Step-by-step: SSL Installation

                        In ServiceDesk Plus, we use a keystore file to store the private key and this keystore file will be used by the web server to secure the connections. Below are the steps that needs to be followed to generate a keystore file and install the ...
                      • How do I install SSL certificate for ServiceDeskPlus-MSP?

                        Introduction ServiceDesk Plus - MSP can run as a HTTPS service. But it requires a SSL (Secure Socket Layer) Certificate signed by a valid Certificate Authority (CA). By default, on a first-time start-up, it creates a self-signed certificate. This ...
                      • How to install SSL certificate in AssetExplorer

                        SSL Installation Do you have a Wildcard or a Multi-domain certificate already running in your other servers and want to reinstall in on AssetExplorer server ?, then click here to find how to export SSL certificate using MMC.  Do you already have a ...