Renewal of the SOTI XSight Agent Service (XAS) Certificate

This article summarizes the steps for renewing the SOTI XSight Agent Service (XAS) certificate when using SOTI MobiControl Internal Signed Deployment Server Extension certificates.

SOTI XSight

To renew the SSL/DSE Certificate for SOTI XSight, you must perform the following steps within its admin utility. These steps are specifically for the SOTI XSight Agent Service (XAS).

When SOTI XSight is installed, a certificate file is located at a specified location. This certificate is a duplicate of the SSL certificate currently in use. When the certificate is nearing its expiration date and needs to be renewed, follow the steps outlined below.

Renewing the XAS certificate when using SOTI MobiControl Internal Signed DSE certificates

Note: Skip to Step 8, “Exporting the server certificate to the required location for SOTI XSight Agent Service” if you are using a company-controlled SSL Certificate not generated internally by the SOTI MobiControl Administration Utility (MCAU) itself.

1. Navigate to the following location to confirm the presence of a certificate:

%ProgramData%\SOTI\XSight\XAS\

2. Look for the following file (Note that its name format may appear different based on your local system configurations):

local_SotiAssist (Security Certificate) or local_SotiAssist.cer

3. Rename this file to “local_SotiAssist_old_backup” for rollback purposes.

Once the file location is confirmed with the use of SOTI XSight Agent Service (XAS)

4. Open the SOTI MobiControl Administration Utility, navigate to the Certificates menu, and select the following certificate that is in use by the console (assuming you are using the same SSL certificate as SOTI MobiControl in the SOTI XSight Admin Utility).

5. Select Change to the right of the certificate.

A smaller menu appears, displaying the various SSL certificates currently in use by SOTI MobiControl. If you clicked the Change button previously, this smaller menu should have already selected the certificate currently in use for the web console. However, ensure that this is the correct certificate before proceeding. 

6. Once the certificate is selected, choose the Export button on the right side of the smaller menu. The following message displays:

In this situation, there is no issue because the local machine has already imported and installed this certificate.

7. Select OK to proceed to the next step. The Save As window displays:

Exporting the server certificate to the required location for SOTI XSight Agent Service

8. While on the same window, navigate to the following directory where you should see the certificate you renamed:

%Programdata%\SOTI\XSight\XAS\

9. Type the following filename (MAKE SURE THE SPELLING MATCHES EXACTLY):

local_SotiAssist.cer

10. Once you have saved the file in the specified location, open the SOTI XSight Admin Utility to the Services Status menu and select Restart on “SOTI XSight Agent Service”.

Once the service restart has finished, you have completed the SOTI XSight Agent Service (XAS) certificate update.

Note: If you encounter any issues during this process, contact a SOTI Support representative for further assistance renewing your SOTI XSight Agent Service Certificate.