Product: ProfileUnity
Product Version: 6.8.5
Expires on: 365 days from publish date
Updated: May 11, 2023
Problem:
Custom private certificate imports is successful but after restarting ProfieUnity service the certificate reverts to old certificate.
Symptoms:
Expired Certificate:
Also ProfileUnity.LicenseServer.exe.log might have a message:
"Licensing certificate in use does not match your Liquidware generated certificate."
Possible Resolution(s):
Steps to have this issue resolved:
1) Snapshot or backup ProfileUnity console
2) Backup and save ProfileUnity database (Administration\Database\Backup) save .zip
3) Stop:
- ProfileUnity Service
- ProfileUnity Licensing Server Service
- ProfileUnity FlexDisk Service
4) Double click your custom certificate in "Computer Certificate Management" and go to "Details" scroll down until you find the "Thumbprint"
Example pic:
Copy the "Thumbprint" to a notepad for later use.
5) Download and install Robo 3T on ProfileUnity server and connect to the MongoDB database:
6) Connect "Authenticate" to the database using your "prou_services" account and password once connected
- User name: prou_services
- Password: Your prou_services password
- Authentication DB: admin
Example:
7) Open "ProfileUnityDotNet\Collections\KeyValues\ and find "MessageQueuig" and "Edit Document"
8) Find "CertificateHash" and replace the number between the " and \ with the Thumbprint copied from the certificate in step 5.
Find UserCertificateHash and clear it.
Example before:
After:
Example:
\"UserCertificateHash\": \"\"\r\n }\r\n}"
Save Document.
Close Robo3T
9. Edit C:\Program Files (x86)\ProfileUnity\Licensing Server\ProfileUnity.LicenseServer.exe.xml
Replace "CertStoreThumbprint" with the Thumbprint we copied from certificate in step 5.
Replace in between the quotes ""
Example:
Save the file.
10) Start:
ProfileUnity FlexDisk Service
ProfileUnity Licensing Server Service
ProfileUnity Service
11) Verify that PU console is accessible
12) Verify that certificate is showing correctly in the console
13) Verify that the API get certificate is working as well:
https://fqdn_console_name.com/api/getlicensingcertificate
The output should look like this after providing prou_services account name and password.
14) Test that users logging in are not getting Licensing errors and logons are recorder in Licensing Logon Log.