MOR-PROC-030 Version 1 Last Review Date: Jan, 2025
Update SSL Certificate
This process will guide you through the process of renewing the certificate on the Azure Platform.
What and WHy do we need SSL?
SSL is a type of encryption protocol that secures data between browsers and servers so it can't be intercepted. This makes it impossible for hackers to read customer information. Ultimately, SSL certificates create a safer website experience for businesses and customers.
SSL certificates are typically renewed every year, but the exact frequency depends on the certificate and the level of security required. We renew our certificate every year (12 months).
VITG currently source the new Certificate and password and communicate to the MoreCore Team.
Get Certificate File and Password
This is in the form of *.pfx for the certificate and a password in text form The Primary SSL Certificate in use for CMMS is a wildcard certificate for *.cbcgroup.com.au, provided by GoDaddy. This is currently managed by VITG.
Update Azure Application process
Navigate to App Service / Settings / Certificates / Bring your own certificates
Add new certificate in each App Service
via the Add Certificate button. Each environment has 2 App Services that need to be updated, and this needs to occur on cmms-prod, cmms-test, and cmms-demo, so 6 in total.
- Upload cert
- Enter Password
- Click Validate and then Add
Update TLS/SSL Binding
- Navigate to App Service / Custom domains
- Click the … button on the custom domain line.
- Select Update Binding
- Select the latest certificate.
- Click Update
Restart App Services
App Services related to the environment just updated (normal site and api site) – This needs to be done out of hours.
Update Azure Application Gateway
- Navigate to cmms-prod-ag application gateway You can type cmms-prod-ag in the search bar
- Goto listeners under settings
- Select each 443 listener
- for each listener, update the certificate
Note: Changes take approximatley 10 minutes to propagate
Checking the Certificate Renewal
Navigate to all CMMS environments via the web browser and click on the left hand side of the address bar to confirm that the new certificate has been used.