Rotate TLS Certificate for Jira Connector in Jira Align On-Premise

Summary

This article provides a step-by-step guide on how to rotate the Mutual TLS Certificate used by the Jira Connector for Jira Align On-Premise instances.

Environment

Jira Align On-Premise 11.x

Solution

To rotate the mutual TLS certificate used by the Jira Connector on the Jira Align On-premise, please follow these steps:

Step 1: Extract the Public Valid Certificate from the Jira Instance

1. Access the Jira URL Instance:

   • Open a web browser and navigate to the Jira URL instance on your Jira Align on-premises web server

2. View Site Information:

   • Click on the padlock icon in the address bar.

   • Select "View site information" or a similar option, depending on the browser.

3. Access Certificate Details:

   • Click on "Connection is Secure" or the equivalent option.

   • Click on "Certificate is valid."

     

4. Export the Certificate:

   • In the Certificate Viewer window, go to the "Details" tab.

   • Click on the "Export" button.

5. Export as DER in CER Format:

   1. Choose the option to export the certificate as a DER-encoded binary file.

   2. Save the file in DER format to a location on your local machine.

Step 2: Rename and Place the Certificate

1. Rename the Certificate:

   1. Rename the exported certificate file to clientcertificate.cer.

2. Place the Certificate in the Designated Directory:

   1. Move the clientcertificate.cer file to the following directory: C:\[YOURCOMPANYNAME]\Jira

   2. Replace [YOURCOMPANYNAME] with your actual company name directory used in the Jira Align setup.

Step 3: Restart the Jira Connector Service

• Open Windows Services:

  • Go to the Windows Start menu, search for "Services," and open the Windows Services application.

• Locate the Jira Connector Service:

  • Find the service named Agilecraft_Jira_<Customer>_1, where <Customer> is the specific customer identifier for your Jira Align instance.

Restart the Service:

• Right-click on the Agilecraft_Jira_<Customer>_1 service.

• Select "Restart" from the context menu. This action will:

  • Copy the new public certificate into the SQL database for the Jira Align site.

  • Log the certificate change event for auditing purposes.

Step 4: Verify the TLS Certificate in Jira Align Connector

Check the Jira Align Connector:

• Navigate to the Jira Align Connector in your Jira Align instance.

• Confirm that the new TLS certificate is displayed and correctly recognized by the system.