Watchdoc Tools - Sign a certificate with WCM

Access WCM

1. Launch the Windows console as administrator;

2. run the cd command and specify the path to WCM (C:\Program Files\Doxense\Watchdoc by default);
   cd C:\Program Files\Doxense\Watchdoc

3. launch the wcm.exe tool.
   

Export the available certificate

1. In WCM, enter the path to the configuration file:

• for Watchdoc:
  /config=..\Watchdoc\Data\config.xml

• for Watchdoc Supervision Console (WSC):
  /config=..\Supervision\Data\wts_config.xml

 

2. enter the command to export the available certificate including the private key:

• to export toward C:\Program Files\Doxense\Watchdoc\http-server.cer:
  export --key

• to choose an other specific export space:
  export --key http-server C:\temp\certsigningtest\wcmexport.cer
  

Generate a CSR file

To generate a (Certificat Signing Request) file, enter the csr command to generate a CSR file corresponding to the certificat selected in base 64.

Produce the signed certificat

1. In a web browser, enter the adress to access the domain controller (example: http://adresseDC/certsrv);

2. in the section Select a task, click on Request a certificate:
   

3. in the Request a Certificate interface, click on Advanced certificate request:
   

4. in the Submit a Certificate Request or Renewal Request interface, past the CSR in base 64 in the field Saved Request:
   

5. in the Certificate Template section, in the dropdown list, select Web Server;

6. click on Submit;

7. in the Certificate Issued interface, check the radio-button Base64 encoded;

8. then click on Download certificate:
   

9. Save the signed certificate (.cer extension).

Do not click on Download certificate chain.

Complete the certificate request

To complete the certificate:

1. stop the Watchdoc or WSC^® service;

2. activate WCM;

3. in WCM, enter the following command:complete http-server <path to your certificate>

4. Confirm with the command y;

5. Save with the command save;

6. Restart the Watchdoc or WSC^® service.