Skip to main content

AEP Certificate Renewal

Jeremy Boilard

Problem Statement

Certificates for Avaya Experience Portal (AEP) components were approaching expiration and needed to be renewed. The tracked systems included AEP-related servers such as EPM, MPP, and CBA/CBS components as applicable to the environment.

Impact

If certificates expire, AEP component communication or application access may fail, potentially affecting portal functionality, integrations, or administrative access. In this case, the referenced servers were believed not to be in production, but snapshots and validation were still required before making changes.

Alarm

No alarm was associated with this issue.

Troubleshooting Steps

  1. Confirm the affected AEP components and servers that require certificate renewal, including EPM, MPP, and any CBA/CBS components used in the environment.
  2. Confirm whether the affected servers are in production and schedule an approved maintenance window if required.
  3. Create snapshots or backups of all affected servers before making certificate changes.
  4. Perform discovery on the servers to identify the current certificate locations, certificate expiration dates, service dependencies, and any required certificate chain or trust-store updates.
  5. Generate or obtain the renewed certificates using the required certificate authority process for the environment.
  6. Renew, import, or replace the certificates on each affected AEP component according to the applicable product procedure.
  7. Restart or reload only the required services after certificate replacement, if required by the component procedure.
  8. Validate that the renewed certificates are presented correctly and that the certificate chain is trusted.
  9. Perform functional testing for AEP services and related component communication after renewal.
  10. Monitor for certificate, TLS, or application errors after the change is completed.

Resolution

Server snapshots were created, discovery was performed, certificates were generated and renewed, and functionality testing was completed successfully. The certificate renewal work was completed and the ticket was closed.