I have an instance of sitecore commerce 9.0.1 installed on my local machine. Two days back I found that all the certificates are expired.

I created new Self-Signed Certificates and deleted the old ones and also remapped the thumbprint in the config files of SxP,xConnect, commerce roles etc.

Business Tool doesn't open, nothing in analytics works, product are empty etc.

I can see lots of error related to xConnect, xDb and all.

Please share your thoughts on the right way to replace expired certificates in sitecore commerce 9 ?


1 Answer 1


If you already have the new self trusted and client certificates, then make sure you update the following config files:


  • sc\App_Config\ConnectionStrings.config
  • xconnect\App_Config\AppSettings.config
  • xconnect\App_Data\jobs\continuous\AutomationEngine\App_Config\ConnectionStrings.config
  • xconnect\App_Data\jobs\continuous\ProcessingEngine\App_Config\ConnectionStrings.config

Identity Server:

  • identityserver\Config\production\Sitecore.IdentityServer.Host.xml

After doing so, make sure you have the right certificates on IIS.

enter image description here

The next thing I would double check is if you self-trusted certificate has a private key and if all generated certificates have the right read-write access:

enter image description here

enter image description here

You can find a more detailed explanation about all those certificate issues on this blogpost: https://coveoticore.wordpress.com/2019/02/19/how-to-fix-a-certificate-issue-on-a-sitecore-9-1-instance/

  • The solution you provided gave some idea about updating certificates in Sitecore XP. But here I have issue with updating certificates for Sitecore Commerce 9 update 1 instance, where we have multiple certificates to handle. Do you have any idea about this ? Commented Mar 16, 2019 at 11:17

Not the answer you're looking for? Browse other questions tagged or ask your own question.