Skip to navigation

Rotating a Certificate for an On-Prem Agent

View as Markdown

This guide describes how to update the cert that your on-prem agent uses to establish connections with Moveworks cloud, LDAP/Active Directory over SSL or StartTLS, or an on-prem REST system.

  1. Find the path to the existing cert: navigate to moveworks/config and run cat agent_config.yml to view path_to_cert.
    • Use pwd to print the working directory, cd .. to go up a folder, and ls to list all folders.
  2. Replace the cert at the path_to_cert location.
    • Note: If you choose put the cert in a NEW location, you must also reconfigure your agent to update the path to the cert.
  3. Restart the agent using the following commands:
    • Run sudo ./setup_agent.sh --stop, then sudo ./setup_agent.sh --start.
    • Confirm that the agent restarted correctly by checking the agent log files: tail -f /var/log/moveworks/*.INFO.log