How To: Reset Domain TLS Certificate using Sqlite3 and PowerShell

Question

How do I reset the TLS certificate for a domain using the PowerShell API?

Answer
You can reset the domain TLS certificate via the PowerShell API by executing the appropriate command that targets the domain object and triggers a certificate renewal or reissue.

Pre-requisites

Pre install sqlite3

Steps

1. Download the attached default certificate.
2. Stop Titan Service in windows services management (services.msc)

1. Press Windows Key + R
2. Type services.msc
3. Locate and select Titan Service
4. Right click Titan Service and select Stop

3. Open PowerShell with Administrator permission and run this command and get the KeyGuid

C:\sqlite3.exe "C:\ProgramData\South River Technologies\srxserver\database\lasdb.db" "SELECT * FROM nxKeys"; 

    

4. Create update sql file

1. Open Notepad
2. Copy the query below

UPDATE nxKeys

SET document = readfile(‘Path/to/your/certificate/defaultcert.txt’) WHERE keyguid = 'KeyGuidFromStep1';

3. Save the file as update.sql

5. Run the sql file in PowerShell

Get-Content "path\tp\your\sql\file\update.sql" | `

& "C:\sqlite3.exe" "C:\ProgramData\South River Technologies\srxserver\database\lasdb.db" 

6. Start the service in windows services

1. Press Windows Key + R
2. Type services.msc
3. Locate and select Titan Service
4. Right click Titan Service and select Start

7. Open Web browser and try to access https://localhost:31443