CHS Certificate Notes

★☆★☆ Important GoDaddy Certificate Note ★☆★☆

If not renewing a certificate (instead re-keying) with the original key with GoDaddy, the old certificate is revoked 72 hours after the new certificate is issued. Allot plenty of time to replace the certificates on all servers before 72 hours passes.

Servers using *.housingservices.com Wildcard Certificate

STAR2018 began on Fred
STAR2023 auto-renewed using the same csr/key as STAR2018

Highest Priority (Customer Facing)

• housingservices.com (WordPress) *Handled automatically by RM
• corporatehousingservices.com (Rent Manager Site Manager) *Handled automatically by RM
• WEB (IIS) DEFUNCT

High Priority (Non-IT User Facing)

• Stoneware (Stoneware Specific Java Keystore)
• StonewareDMZ (Stoneware Specific Java Keystore)
• Cairo (IIS)
• Cairo (Updating the Certificate in Remote Desktop Services)
• Halifax (IIS)
• Eaton (IIS)
• Essen (IIS)
• Eaton (Unified Messaging/IIS)(Updating a Certificate Exchange Management Console)
• Essen (IIS)(Updating a Certificate Exchange Management Console)
• Fred (IIS/FTP)
• Streamwood (Linux/Apache)
• Athens (ADFS) (Installing an Existing Certificate in ADFS)
• Ankara (ADFS) (Installing an Existing Certificate in ADFS)
• Hartford (IIS)
• Fishers(IIS)

Lower Priority (IT Users)

• Nago (Linux/Apache) DEFUNCT
• SonicWALL Corp (Console)
• Phoenix (IIS)
• Utica (Linux/Apache)

Servers using *.chsintech.com Wildcard Certificate

STAR2019 began on Hampton
STAR2020 auto-renewed using the same csr/key as STAR2019.
STAR2021 auto-renewed using the same csr/key as STAR2020.
STAR2023 began on Fred

Highest Priority (Customer Facing)

• Hampton (IIS)

High Priority (Non-IT User Facing)

Lower Priority (IT Users)

• Zaria (Linux/Apache) – *.chsintech.com
• Kent (Linux/Apache) – *.chsintech.com

Servers using *.mmproaudiovideo.com Wildcard Certificate

STAR2020 began on Fred.

Highest Priority (Customer Facing)

• Berlin (IIS)

Servers using *.corporatehousingservices.com Wildcard Certificate

STAR2019 began on Fuji

• Fuji

Example Scenario for Renewing and Installing a New Certificate on Appropriate Servers

1. Server: Eaton –> Renewing a GoDaddy Wildcard Certificate
2. All IIS Servers –> Install an Existing SSL Certificate on a Windows Server
3. Stoneware/StonewareDMZ –> Installing Existing Certificate in Stoneware
4. Lync WebService –> Add Exchange Certificate to Lync WebService Trusted Root Store
5. ADFS Servers –> Installing an Existing Certificate in ADFS
6. Server: Nago –> Create Certificate Files for Apache on Linux
7. SonicWALL Devices –> Install an Existing SSL Certificate on SonicWALL Device

Active Directory Certificate Authorities

• fred.housingservices.com: “housingservices-FRED-CA” (Generally used for certificate requests for GoDaddy.) ★☆ Primary ★☆

Request Syntax: e.g. fred.housingservices.com\Collegiate Housing Services

IIS Command Line Certificate Import

certutil -f -p password -importpfx "Q:\NetGroup\Files\Certificates\CHS\Wildcard\2021\Windows\STAR2021.pfx