WAC Certificate Issue – PKI Signed Cert cannot be used
WAC Certificate Issue
when i change in appsettings.json the line
“Subject”: “WindowsAdminCenterSelfSigned”
to
“Subject”: “CN=admincenter.domain.int”
and change the netsh config:
netsh http delete sslcert ipport=0.0.0.0:443
netsh http add sslcert ipport=0.0.0.0:443 certhash=81893C1D789EA40EC8FC04FD08DB72DD44F2FBB1 appid=”{afebb9ad-9b97-4a91-9ab5-daf4d59122f6}”
restart-service WindowsAdminCenter
the WAC is not Accessible, because the WAC Service Cannot be started!
Why you did not use the Thumbprint in the appsettings.json file? because same Subject like servername.domain.int can be used multiple Times in a cert.
On the Other hand Thumbprint is fixed size length, Subject can be very long … like
“E=email address removed for privacy reasons, CN=admincenter.domain.internal, OU=Domain, O=company, L=munich, C=DE”
WAC Certificate Issuewhen i change in appsettings.json the line “Subject”: “WindowsAdminCenterSelfSigned” to “Subject”: “CN=admincenter.domain.int” and change the netsh config:netsh http delete sslcert ipport=0.0.0.0:443netsh http add sslcert ipport=0.0.0.0:443 certhash=81893C1D789EA40EC8FC04FD08DB72DD44F2FBB1 appid=”{afebb9ad-9b97-4a91-9ab5-daf4d59122f6}”restart-service WindowsAdminCenterthe WAC is not Accessible, because the WAC Service Cannot be started!Why you did not use the Thumbprint in the appsettings.json file? because same Subject like servername.domain.int can be used multiple Times in a cert.On the Other hand Thumbprint is fixed size length, Subject can be very long … like”E=email address removed for privacy reasons, CN=admincenter.domain.internal, OU=Domain, O=company, L=munich, C=DE” Read More
