Question

How do I update/change my Agent certificates?

 

Background

Your Agent public/private certificate pair are used to authenticate your identity and allow Enterprise and/or eDiscovery to connect to your Agents.  When those certificates expire, or otherwise need to be changed, new Agents with a new certificate will need to be deployed.

 

Answer

  1. Generate a new Agent public/private certificate pair (refer to this article for certificate requirements).
  2. Configure Enterprise and/or eDiscovery to use the new certificate pair.  In Enterprise, this is done in Tools > Preferences on the main screen, or Tools > Configure Agent Push while in a case.  For eDiscovery, you can use the steps here.
  3. Uninstall all existing Agents.  This can either be done through the Enterprise and/or eDiscovery interface, or via command line (or SCCM) with the links at the bottom of this article.
  4. Install new Agents with the new certificate pair.  This can either be done through the Enterprise and/or eDiscovery interface, or via command line (or SCCM) with the links at the bottom of this article.