Certificate Update Utility 

Starting in Sierra 6.6, a new updatecert script is the supported utility for updating SSL/TLS certificates across Sierra environments. Library administrator and Clarivate staff can install new certificates on the:

  • Application server

  • Database server

  • Encore server

After replacing the appropriate certificate and key files, the script also restarts the relevant applications/services automatically.

Installing new certificate on the Application server, DB server, or Encore Server locally (local certificate update)

To install new certificate on the App, DB server or Encore server:

  1. Start at the command line on the chosen server, with your certificate and/or key already placed in known location.

    The directory where the certificate is placed must have read/write/execute (search) permissions for user and group “iii” (e.g. chown iii:iii and chmod 0550), and the certificate itself must be readable/writeable by user iii (e.g. chown iii:iii, chmod 0600).

  2. In the command line, call:

    iiictl updatecert <path-to-new-certificate>

    Certificates on the current machine are updated and services are restarted.

Installing new certificate on the Database server (remote DB server certificate update)

To install new certificate on the Database server:

  1. Start at the command line on the Application server, which has the remote install capability, with your certificate and/or key for the DB server already placed in known location.

    The directory where the certificate is placed must have read/write/execute (search) permissions for user and group “iii” (e.g. chown iii:iii and chmod 0550), and the certificate itself must be readable/writeable by user iii (e.g. chown iii:iii, chmod 0600).

  2. In the command line, call:

    iiictl updatecert -d <path-to-new-certificate>

    Certificates on the database server are updated and necessary services are restarted.

Installing new certificate on the Encore server (remote Encore server certificate update)

To install new certificate on the Encore server:

  1. Start at the command line on the Application server, which has the remote install capability, with your certificate and/or key for the Encore server already placed in known location.

    The directory where the certificate is placed must have read/write/execute (search) permissions for user and group “iii” (e.g. chown iii:iii and chmod 0550), and the certificate itself must be readable/writeable by user iii (e.g. chown iii:iii, chmod 0600).

  2. In the command line, call:

    iiictl updatecert -e <path-to-new-certificate>

    Certificates on the Encore server are updated and necessary services are restarted.