The Snow Inventory Server SSL Certificate for Inventory has expired or will expire soon and needs to be updated.

Snow Inventory Master Server/SSL Certificates

The video below walks you through the process of replacing the SSL certificate currently bound to your Snow Inventory Server instance with a new one​​​​​​​.

​​​​​​​

Steps

Step 1 - Gather the necessary information

1. On the Snow Inventory system, open an Administrator Command Prompt and run the command: netsh http show sslcert. The result will look similar to the example below.

Take note of the IP address and port number; it should match what is needed for Snow Inventory.

Note: If the system has more than one SSL/TLS certificate, locate the correct certificate by looking in the control panel within the section Manage Computer Certificates > Personal > Certificates.

2. Next, within Control Panel, open Manage Computer Certificates.
   • Double-click on the new certificate.
   • Click on the Details tab.
   • Scroll down to Thumbprint.
   • Select and then Copy to File.
3. Paste the copied thumbprint into a text editor like Notepad and remove any spaces.

Step 2 - Delete the old certificate

1. Open the Command Prompt and type: netsh http delete sslcert ipport=<ip_port>.

Note: Replace <ip_port> in the statement above with the IP port.

Step 3 - Add the new certificate

1. In the Command Prompt, type: netsh http add sslcert ipport=<ip_port> certhash=<thumbprint_value_you_copied_into_text_editor> appid={0ca478a6-87af-4de7-84d4-425ec03c6b9d} clientcertnegotiation=disable.

Note: Remember to replace <ip_port> and <thumbprint_value_you_copied_into_text_editor> in the statement above with the relevant information you captured earlier. The appid never changes.

Step 4 - Validate that the new certificate was correctly added

1. In the Command Prompt, run the command: netsh http show sslcert to confirm it’s been updated by comparing the CertHash/thumbprint value.
2. Browse to the master server URL to confirm it’s using the new certificate by clicking on the padlock next to the URL.
   • Click on certificate and check validation dates under the General tab.

Expired certificate