Export Web Server Authentication Certificate Information

The Costpoint integration uses HTTPS which requires you to export web server authentication certificate information into a file that will be uploaded to the Costpoint Java Trust Keystore.

Note: In this procedure you will:
  • Obtain the Server Authentication Certificate Thumbprint.

  • Obtain the Server Authentication Certificate Subject.
  • Export the associated root and intermediate certificates for later import into the Costpoint Java Trust Keystore.

To export web server authentication certificate information:

  1. Open the Certificates MMC Snap-In and go to the following folder location: Certificates > (Local Computer) > Personal > Certificates.
  2. Attention: For more information, refer to: https://docs.microsoft.com/en-us/dotnet/framework/wcf/feature-details/how-to-view-certificates-with-the-mmc-snap-in. If your server does not have a certificate, you need to obtain one before continuing this procedure. For more information, refer to: https://docs.microsoft.com/en-us/dotnet/framework/wcf/feature-details/how-to-obtain-a-certificate-wcf.
    Open the Windows Server Certificate intended for Server Authentication.
  3. Attention: For more information, refer to: https://docs.microsoft.com/en-us/dotnet/framework/wcf/feature-details/how-to-retrieve-the-thumbprint-of-a-certificate.
    On the Details tab of the certificate, copy the following:
    • Thumbprint: Remove all spaces and save this information for the binding steps.
    • Subject: This is usually the fully qualified name of the server. Save this information for the Costpoint configuration.
  4. Click the Certification Path tab, select the root certificate at the top of the path, and click View Certificate.
  5. On the root certificate window, click the Details tab and then click Copy to File. Save a file using the DER encoded binary X.509 (.CER) format. This file will be used for Costpoint connection configuration.
  6. Perform similar steps (step 4-5) for any intermediate certificates that may be in the path between the root and the server.