Problem

If the default PassPort certificates have been replaced, it will not be possible to connect to PassPort in SSO mode.

Resolution

Perform the following procedure to renew your PassPort certificates on Electronic Signature side:
---
1. Stop Electronic Signature and Passport.
2. Remove the expired keystore es_sso.jks, located in <Electronic Signature install dir>/data/conf/passport, from Electronic Signature.
3. Copy the new keystore, PassPort/conf/security/ssl.jks, from PassPort to the following location in Electronic Signature: <Electronic Signature install dir>/data/conf/passport.
4. In Electronic Signature, rename ssl.jks to es_sso.jks.
5. Restart PassPort and Electronic Signature.

---

The connection between PassPort and Electronic Signature is now restored.