Updating the Certificate on the Location Server Machine (Internal Only)

07/21/2025 12:24 pm EDT

Location server machine details are in LastPass. Current server information based on the time of these notes.

IP: ec2-44-226-4-85.us-west-2.compute.amazonaws.com
Login: <see lastpass>
Password: <see lastpass>

The certificate must be provided by West/Intrado.

Upload the certificate file provided by West/Intrado and place it in the working directory on the location server machine. This working folder can be any folder; it is just where you will run the script to install the certificate. There is a script to do this called “InstallCertificates.cmd”.

Script InstallCertificates.cmd:

rem Install the certificate
certutil -f -v -p "Intr@Do911" -importpfx "C:\Intrado Cert Install\2022\BOLD_ERL_2025.pfx"

rem Install the certificate in the LOCAL_MACHINE\Personal and give "NETWORK SERVICE" access to use the certificate.
"C:\Intrado Cert Install\2022\winhttpcertcfg.exe" -g -c LOCAL_MACHINE\My -s "BOLD_ERL" -a "NETWORK SERVICE"
"C:\Intrado Cert Install\2022\winhttpcertcfg.exe" -g -c LOCAL_MACHINE\My -s "BOLD_ERL" -a "DefaultAppPool"

rem Install additional certificates that West needs in order to function. Only needed on new install
certutil -f -addstore ROOT "ComodoHighAssuranceCA.crt"
certutil -f -addstore ROOT "AddTrust.crt"
certutil -f -addstore ROOT "Intrado_Chain_Bundle.crt"

pause

Steps to install:

Place cert in working directory.
Open a command prompt as admin.
Execute the script from the command prompt.
1. Change directory to the working directory.
2. InstallCertificates.cmd (script name).
3. Verify all commands ran in the script without error. If there are errors, fix each one.
Open the web.config from the inetpub folder in Notepad++.
Locate the thumbprints in the web.config.
1. <clientCredentials> section.
2. Update the thumbprints to match the appropriate certificate Note: There is a lab and production certificate installed. Within the thumbprint section, there are two sections, name=”ErlBehaviorLab” and name=”ErlBehaviorProduction”.
3. Thumbprints can be found in the local certificate manager (certlm).

Open the cert or double click – Details – near the bottom.

Enter the thumbprint in the web.config file for the appropriate cert. Spaces are required to break the thumbprint into section after every two characters.

Ex. "a2 66 03 33 71 f6 9e e0 23 b2 b3 a9 5d a1 de de 86 b6 f3 a3"

Restart IIS
The certificate has been updated. Test and verify that LocationServices is working properly.

Was this article helpful?