TOPICS

HENNGE Directory Sync Tool Server Certificate Update Procedures

  • Date created
  • Last updated date

1. Background

Since we are updating the server-side certificate for the HENNGE Access Control service, there are some updates that the customer may need to operate on the Active Directory servers.
Please check whether your server matches the conditions below by 2020/01/12.

About the actual procedure, please refer to the following instructions manual.
HENNGE Directory Sync Tool Server Certificate Update

For details on judging whether the server certificate update installation is required for HENNGE Access Control server, please refer to the following article.
How to check if HENNGE Directory Sync Tool requires Certificate Update

2. Precautions

The Admin account of the server which has HENNGE Directory Sync Tool installed on is required.

3. Procedures

For the server that has the HENNGE Directory Sync Tool installed, Amazon has provided certificates that are needed to be installed.
Please follow the [ Prerequisite ] manual first, then follow the manual according to the version of the server that the HENNGE Directory Sync Tool is installed on.

This server certificate is used very commonly, and there are no issues or security reports related to this certificate.
The server will not require any downtime on the server machine. (There will not be any restart of the server required.)

Prerequisite : Download the Certificate+

※ Please operate the procedures in this manual in the same your local client.

 

Step 1. Access the following URL, and download the [ AddTrust External CA Root ] certificate.

 

Open the Browser and access the URL below.

https://www.amazontrust.com/repository/

 

 

 

Step 2. Download the Amazon Root CA 1 Server Certificate.

 

Download the certificate [ Amazon Root CA 1 ] under the [ Root CAｓ ] certificates, and download the version DER onto your server.

Download the AmazonRootCA1.cer certificate.

 1_edited.png

 

※ The following screenshot is an example of using the "Internet Explorer" Browser to download the certificate, the actual screen may differ according to your environment.

2_edited.png

 

 

 

Certificate Installation Procedure (Windows Server 2008 R2)+

Step 1. Login to the server with an Admin account.

 

 1_edited.png

 

 

 

Step 2. Click on [ Start ] menu and input [ mmc ], look for the [ mmc.exe ] in the search results and click on it.

 

 2_edited.png

 

 

Step 3. Click on the [ File ] on the top menu of the MMC Window.

 

 3_edited.png

 

 

 

Step 4. Click on the [ Add/Remove Snap-in... ].

 

 4_edited.png

 

 

Step 5. Look for [Certificates] in the [ Add or Remove Snap-ins ].

 

 5_edited.png

 

 

 

Step 6. Click on [ Add > ].

 

 6_edited.png

 

 

 

Step 7. Click on [ Computer account ], and click on [ Next > ].

 

 7_edited.png

 

 

 

Step 8. Click on [ Local Computer ], and click on [ Finish ].

 

 8_edited.png

 

 

 

Step 9. Ensure that the [ Certificates (Local Computer) ] is already added, and click on [ OK ].

 

 9_edited.png

 

 

 

Step 10. In the [ Console Root ], look for [ Certificates (Local Computer) ] and click on it.

 

 10_edited.png

 

 

 

Step 11. Double click on [ Trusted Root Certification Authorities ].

 

 11_edited.png

 

 

 

Step 12. Click on [ Certificates ].

 

 12_edited.png

 

 

 

Step 13. Check to see if [ Amazon Root CA 1 ] is found under the certificates console.

 

If [ Amazon Root CA 1 ] certificate is found, the operation is completed.
You can now close the Microsoft Management Console Window and the operation has been completed.

If [ Amazon Root CA 1 ] is not found, please follow the following steps.

 13_edited.png

 

 

 

Step 14. Please prepare the certificate mentioned in the previous steps mentioned in the [ Prerequisites ] operation.

 

 14_edited.png

 

 

 

Step 15. Double click on the certificate to be installed and click on the [ Install Certificate ].

 

 15_edited.png

 

 

 

Step 16. Click on [ Next > ].

 

 16_edited.png

 

 

 

Step 17. Select the [ Automatically select the certificate store based on the type of certificate ], and click on [ Next ].

 

 17_edited.png

 

 

 

Step 18. Click on [ Finish ].

 

 18_edited.png

 

 

 

Step 19. Wait for the [ The Import was successful ] message, and click on [ OK ].

 

 19_edited.png

 

 

 

Step 20. Perform procedures Step 2 to 13 again to check if [ Amazon Root CA 1 ] is present.

 

 20_edited.png


The procedure has been finished for certificate installation.
Please close the Microsoft Management Console Window and complete the operation.

 

 

Certificate Installation Procedure (Windows Server 2012 / Windows Server 2012 R2)+

Step 1. Login to the server with an Admin account.

 

 1_edited.png

 

 

 

Step 2. Click on [ Start ] menu and input [ mmc ], look for the [ mmc.exe ] in the search results, and click on it.

 

 2_edited.png

 

 

 

Step 3. Click on the [ File ] on the top menu of the MMC Window

 

 3_edited.png

 

 

 

Step 4. Click on the [ Add/Remove Snap-in... ].

 

 4_edited.png

 

 

 

Step 5. Look for [Certificates] in the [ Add or Remove Snap-ins ].

 

 5_edited.png

 

 

 

Step 6. Click on [ Add > ].

 6_edited.png

 

 

 

Step 7. Click on [ Computer account ], and click on [ Next > ].

 

 7_edited.png

 

 

 

Step 8. Click on [ Local Computer ], and click on [ Finish ].

 

 8_edited.png

 

 

 

Step 9. Ensure that the [ Certificates (Local Computer) ] is already added, and click on [ OK ].

 

 9_edited.png

 

 

 

Step 10. In the [ Console Root ], look for [ Certificates (Local Computer) ] and click on it.

 

 10_edited.png

 

 

 

Step 11. Double click on [ Trusted Root Certification Authorities ].

 

 11_edited.png

 

 

 

Step 12. Click on [ Certificates ].

 

 12_edited.png

 

 

 

Step 13. Check to see if [ Amazon Root CA 1 ] is found under the certificates console.

 

If [ Amazon Root CA 1 ] certificate is found, the operation is completed.
You can now close the Microsoft Management Console Window and the operation has been completed.

If [ Amazon Root CA 1 ] is not found, please follow the following steps.

 

13_edited.png

 

 

 

Step 14. Please prepare the certificate mentioned in the previous steps mentioned in the [ Prerequisites ] operation.

 

 14_edited.png

 

 

 

Step 15. Double click on the certificate to be installed and click on the [ Install Certificate ].

 

 15_edited.png

 

 

 

Step 16. Click on [Local Machine], and click on [ Next > ].

 

 16_edited.png

 

 

 

Step 17. Select the [ Automatically select the certificate store based on the type of certificate ], and click on [ Next ].

 

 17_edited.png

 

 

 

Step 18. Click on [ Finish ].

 

 18_edited.png

 

 

 

Step 19. Wait for the [ The Import was successful ] message, and click on [ OK ].

 

 19_edited.png

 

 

 

Step 20. Perform procedures Step 2 to 13 again to check if [ Amazon Root CA 1 ] is present.

 

20_edited.png


The procedure has been finished for certificate installation.
Please close the Microsoft Management Console Window and complete the operation.

 

 

Certificate Installation Procedure (Windows Server 2016)+

Step 1. Login to the server with an Admin account.

 

 1_edited.png

 

 

Step 2. Click on [ Start ] menu and input [ mmc ], look for the [ mmc.exe ] in the search results and click on it.

 

 2_edited.png

 

 

Step 3. Click on the [ File ] on the top menu of the MMC Window

 

 3_edited.png

 

 

Step 4. Click on the [ Add/Remove Snap-in... ].

 

 4_edited.png

 

 

Step 5. Look for [Certificates] in the [ Add or Remove Snap-ins ].

 

 5_edited.png

 

 

Step 6. Click on [ Add > ].

 

 6_edited.png

 

 

Step 7. Click on [ Computer account ], and click on [ Next > ].

 

 7_edited.png

 

 

Step 8. Click on [ Local Computer ], and click on [ Finish ].

 

 8_edited.png

 

 

Step 9. Ensure that the [ Certificates (Local Computer) ] is already added, and click on [ OK ].

 

 9_edited.png

 

 

Step 10. In the [ Console Root ], look for [ Certificates (Local Computer) ] and click on it.

 

 10_edited.png

 

 

Step 11. Double click on [ Trusted Root Certification Authorities ].

 

 11_edited.png

 

 

Step 12. Click on [ Certificates ].

 

 12_edited.png

 

 

Step 13. Check to see if [ Amazon Root CA 1 ] is found under the certificates console.

 

If [ Amazon Root CA 1 ] certificate is found, the operation is completed.
You can now close the Microsoft Management Console Window and the operation has been completed.

If [ Amazon Root CA 1 ] is not found, please follow the following steps.

 

 13_edited.png

 

 

Step 14. Please prepare the certificate mentioned in the previous steps mentioned in the [ Prerequisites ] operation.

 

 14_edited.png

 

 

Step 15. Double click on the certificate to be installed and click on the [ Install Certificate ].

 

 15_edited.png

 

 

Step 16. Click on [Local Machine], and click on [ Next > ].

 

 16_edited.png

 

 

Step 17. Select the [ Automatically select the certificate store based on the type of certificate ], and click on [ Next ].

 

 17_edited.png

 

 

Step 18. Click on [ Finish ].

 

 18_edited.png

 

 

Step 19. Wait for the [ The Import was successful ] message, and click on [ OK ].

 

 19_edited.png

 

 

Step 20. Perform procedures Step 2 to 13 again to check if [ Amazon Root CA 1 ] is present.

 

20_edited.png


The procedure has been finished for certificate installation.
Please close the Microsoft Management Console Window and complete the operation.

 

 

4. Support Contact

We have opened a special support window for issues regarding the HENNGE Directory Sync Tool updates.
Please utilize the following links to contact our support.

Support Form for Customers using Microsoft 365

Support Form for Customers using Google Workspace

　　　　　　　　　　
Was this article helpful?