Video: Update the SSL Certificate for Snow Inventory Server

The Snow Inventory Server SSL Certificate for Inventory has expired or will expire soon and needs to be updated.

Snow Inventory Master Server/SSL Certificates

The video below walks you through the process of replacing the SSL certificate currently bound to your Snow Inventory Server instance with a new one​​​​​​​.

​​​​​​​

Steps

Step 1 - Gather the necessary information

1. On the Snow Inventory system, open an Administrator Command Prompt and run the command: netsh http show sslcert. The result will look similar to the example below.

Take note of the IP address and port number; it should match what is needed for Snow Inventory.

Note: If the system has more than one SSL/TLS certificate, locate the correct certificate by looking in the control panel within the section Manage Computer Certificates > Personal > Certificates.

2. Next, within Control Panel, open Manage Computer Certificates.
   • Double-click on the new certificate.
   • Click on the Details tab.
   • Scroll down to Thumbprint.
   • Select and then Copy to File.
3. Paste the copied thumbprint into a text editor like Notepad and remove any spaces.

Step 2 - Delete the old certificate

1. Open the Command Prompt and type: netsh http delete sslcert ipport=<ip_port>.

Note: Replace <ip_port> in the statement above with the IP port.

Step 3 - Add the new certificate

1. In the Command Prompt, type: netsh http add sslcert ipport=<ip_port> certhash=<thumbprint_value_you_copied_into_text_editor> appid={0ca478a6-87af-4de7-84d4-425ec03c6b9d} clientcertnegotiation=disable.

Note: Remember to replace <ip_port> and <thumbprint_value_you_copied_into_text_editor> in the statement above with the relevant information you captured earlier. The appid never changes.

Step 4 - Validate that the new certificate was correctly added

1. In the Command Prompt, run the command: netsh http show sslcert to confirm it’s been updated by comparing the CertHash/thumbprint value.
2. Browse to the master server URL to confirm it’s using the new certificate by clicking on the padlock next to the URL.
   • Click on certificate and check validation dates under the General tab.

Expired certificate