SSL certificate renewals: online2.attracs.com

⚠️ Legacy (DigiCert-era). SSL certificate renewal has moved to one current, unified process — Let's Encrypt automation + Ahola Group Vault (https://vault.aholagroup.com/), ~90-day certs. See: SSL certificate renewals: Current process (2026). This page is kept for reference only.

---

Creating windows compatible certificate

Get attracs.com certificate from DigiCert. This is currently managed by Ahola IT (Vesa Ulvi)

This is Windows RDS environment so certificate needs to be .PFX format. If the certificate you have is on format DigiCertCA.crt and star_attracs_com.crt you need to first combine these two in to one .crt

cat DigiCertCA.crt start_attracs_com.crt > attracs_2023_windows.crt

After doing this you can use the attracs_2023_windows.crt with attracs.key (This attracs.key is located in https://github.com/Attracs/attracs-linux-playbooks/tree/master/frontend/files/cert , needs to be decrypted before use)

openssl pkcs12 -export -in attracs_2023_windows.crt -inkey attracs_2022.key -out attracs_2023_windows.pfx

You can put password to certificate, if you do remember to store it in 1password!

to check that the certificate creating worked you should run command

openssl pkcs12 -info -in attracs_2023_windows.pfx

Installing new certificate

You should upload certificate to RDS broker (10.2.0.5) and RDS gateway (10.2.0.6). In C: there is certholder folder that can be used for holding the cert for importing. To import certificate you can open IIS ➝ RDSGATEWAY ➝ on the home page you should see Server Certificates, open it ➝ right side import... and use it to import your uploaded new certificate.

After importing new certificate, add new cert to the default web site. Right click Default Web Site in IIS and select edit Bindings. In there click https/443 and click edit. In the next window you can select new certificate on the bottom.