Update an OAuth Certificate-Based Exchange Connection with a New Certificate

Applies to Riva On-Premise.

If your organization uses OAuth certificate authentication for an Office 365 Exchange connection in Riva, it is necessary to update the certificate before it expires.

• Summary.
• Detailed procedure to update an OAuth certificate.
• Testing the changes.

Summary

After installing the new certificate on the Riva server, open the Exchange connection and update the certificate name to the new one. The Key Identifier must also be updated in Microsoft Azure as part of the process. After updating the certificate, it is highly recommended to test the changes on a small group of users before rolling out to production.

Detailed Procedure to Update an OAuth Certificate

To update an OAuth certificate-based Exchange connection with a new certificate:

1. Ensure that you have prepared Office 365 for a Riva EWS connection.

2. Generate a certificate.

3. In Microsoft Azure, ensure that your application is still properly configured and registered.

4. Edit the sync policy and disable it.

5. Stop the sync service.

6. In the Riva Manager application, double-click the Exchange connection and select the new certificate.

7. In Azure, update the App registration manifest with the new Key Identifier. It can be done in two ways:

   • Option #1: To update it manually by editing the application, follow the steps to add the Key Identifier to the Azure manifest.
   • Option #2: Go to the Microsoft Azure Application Admin Center, and upload the certificate directly. It automatically updates the manifest.
     
     
      

8. In Riva, save the Exchange connection.

9. In Riva, test the Exchange connection

10. Enable the policy, and test the changes on a few users first.

Testing Sync Prior to Implementation in Production Environments

After updating the certificate, it is highly recommended to test the changes on a small group of users before rolling out to production.

To test the changes on a select group of users:

1. Follow the procedures outlined at Sync only one or few Riva users.

2. Enable the sync policy, and restart the sync service.