Regenerate certificates

You will need to regenerate DWS certificates in situations such as changing the IP address of a server or when a certificate expires. Follow these steps to regenerate the DWS certificate.

In the Tungsten Configuration Assistant, stop the ControlSuite Device Web Server service.
Go to the C:\windows\System32\config\systemprofile\AppData\Local\Nuance\Integrated\DWS\webserver\conf folder and delete the following files:
- dws-root-ca.der
- dws-server-key.jks
- dws-signed-server-key.jks
If you are using a custom domain suffix in generating a certificate, do the following:
1. Go to the C:\windows\System32\config\systemprofile\AppData\Local\Nuance\Integrated\DWS\webserver\conf folder and open DWSSettings.properties in a text editor.
2. Add the following line to the DWSSettings.properties file:
```
SubjectAlternateNamesSuffixes=Custom Suffix Name
```
3. Save and close the file.
In the Tungsten Configuration Assistant, restart the ControlSuite Device Web Server service.
Verify that the certificate has been regenerated by doing the following:
1. In a web browser, start the DWS Web administration page. See View the DWS Web administration page for instructions.
  
  The browser should indicate that the website is not secure.
2. Click the Not Secure button or other button for website security.
  
  The page should indicate that the certificate is invalid.
3. Click the certificate link.
4. In the Certificate window that appears, click the Details tab and select Subject Alternate Name.
  
  It should display the IP addresses and host names for the DWS server.

You can generate new DWS certificates and apply them to the server and device.