Problem

How to manually update Transfer CFT certificates after PassPort 2019 certificate renewal ?

This topic applies only if you've set/use the variable am.type=passport in Transfer CFT configuration.

Resolution

Replace the default %CFTPKIDIR%\passportCA.pem with the new passportCA.pem, keeping the same name.

Another approach could be to change in the configuration the reference to the new CA.

CFTUTIL listuconf id=pki.passport.ca_cert
CFTUTIL uconfset id=pki.passport.ca_cert, value=%CFTPKIDIR%\passportCA_new.pem

A restart of CFT will be needed to take into account the new modification.

For additional information consult also "How to configure PassPort AM with CFT" .