Using BigFix Inventory SSL certificate for SSO based on SAML

From BigFix Inventory 11.0.3 new setups are using the BigFix Inventory SSL certificate for SSO. Earlier by default up to version 11.0.3, a self-signed certificate is used during the SSO configuration. However, you can reuse the BigFix Inventory server SSL certificate also in version before 11.0.3. This procedure also applies when configuration was made before upgrading to the BigFix Inventory 11.0.3.

Procedure

  1. Navigate to the path install_dir\wlp\usr\servers\server1\server.xml.
  2. Remove only keyAlias="samlsp and keyStoreRef="SPKeyStore from server.xml.
  3. Open BigFix Inventory in a web browser.
  4. Get the information about the certificate.
    1. Click on the Not secure label on the URL to display the window.
    2. Select the Certificate is not valid option above.
    3. Click on the Details tab.
    4. Export the certificate in base 64 encoded format.
  5. Add the exported certificate to the Active Directory Federation Certificate (ADFS).
    1. Navigate to ADFS management.
    2. Proceed to Active Directory Management Service > Relaying Party Trust.
    3. Right-click on the available relying party and select Properties.
    4. Navigate to the encryption option.
    5. Remove the existing certificate.
    6. Click on Browse, and in the dropdown menu, select All Files.
    7. Upload the downloaded certificate.
  6. Restart the BigFix Inventory server.