Im getting an error as my xConnect certificate appears to have expired today! Im a little suspicious by those dates as it would appear to be valid from Feb 2018 to today. Does this sound possible and would I use SIF to create a new one?
Assuming it's expired you can easily create a new certificate using Windows Powershell by running the following command(so no need of SIF just for that part):
New-SelfSignedCertificate -CertStoreLocation Cert:\LocalMachine\My -DnsName "ClientStaging" -FriendlyName "Client Staging Self Signed" -NotAfter $([datetime]::now.AddYears(10))
Don’t worry about the DnsName — you can assign the cert to any host name.
This is for self-signed certificates. After you run that you will get the thumbprint of it, so just make sure you update the connection string and the
AppSettings.config file, under the xconnect folder which is normally something like
You will also need to make sure to add this new cert to a trusted root store. I followed this guide successfully: aubrett.com/article/information-technology/web-development/iis/… May 19, 2020 at 14:25
You also need to add the xConnect App Pool user to the new certificate via Manage Computer Certificates MMC. Right-click on the new cert then >
All Tasks > Manage Private Keys. Add the xConnect App Pool user there.