Skip to content

Certificate Renewal for TLS

The following article shows how to manually and automatically renew a X.509 certificate used for TLS in yunIO.

Warning

Expired Certificate.
The Cryptographic key pair associated with the certificate is no longer valid and this may cause security risks. Always use a valid certificate. To access the Designer after a certificate has expired, delete the tls.json file in the yunIO installation directory (C:\Program Files\Theobald Software\yunIO\config\servers\) and restart the yunIO service. This resets all TLS settings in yunIO, including the certificate selection.

Renewal with New Key

To renew a certificate with new key:

  1. Before the old certificate expires, install a new certificate on the server machine.
  2. Open the yunIO Designer and reference the new certificate, see Server Settings - Transport Layer Security.
  3. Delete the old certificate from the Microsoft Certificate Store.

Renewal with the Same Key

To renew a certificate with the same key as before:

  1. Block external access to yunIO using the firewall.
  2. Open the yunIO Designer and enable anonymous access, see Access Restrictions - Anonymous Access.
  3. Disable TLS in the Designer, see Server Settings - Transport Layer Security.
  4. Renew the certificate with the same key using Windows AD Certificate Services.
  5. Enable TLS in the Designer with the new certificate.
  6. Disable anonymous access in the Designer.
  7. Allow external access to yunIO using the firewall.
Last update: June 28, 2025
Written by: Valerie Schipka