How to replace a corrupted or deleted certificate for Parallels Configuration Manager Proxy (HTTP mode)

If a Configuration Manager Proxy certificate was corrupted or deleted, you’ll need to replace it by generating a new certificate, exporting it from the computer on which it was generated, and then importing it into Configuration Manager. This article describe how to perform these steps.

NOTE:This solution applies only for HTTP mode.

How to generate a new Configuration Manager Proxy certificate

To generate a new certificate:

1. Run Command Prompt (cmd.exe) as Administrator.

2. Change the directory to C:\Program Files (x86)\Parallels\Parallels Mac Management for Microsoft SCCM.

3. Run the following command:

   pma_isv_proxy_config.exe --gencert --siteCode [siteCode]

   The command gives no output.

4. Close the Command Prompt window.

How to export the certificate

To export the certificate that you generated in the previous step:

1. In Windows, click Start > Run...

2. Type mmc.exe in the Open box and click OK. This will open the Microsoft Management Console.

3. In the console, click File > Add/Remove Snap-in to open the Add or Remove Snap-ins dialog.

4. Click Certificates in the Available snap-ins list.

5. Click the Add button. Select the Computer account option and click Next.

6. On the Select Computer page, select Local computer and click Finish.

7. Click OK to close the Add or Remove Snap-ins dialog.

8. In the Microsoft Management Console, click Console Root / Certificates(Local computer) / Personal / Certificates.

9. Right-click the Parallels Configuration Manager Proxy certificate, then click the All Tasks > Export... option in the pop-up menu. The Certificate Export Wizard opens.

10. Click Next on the Welcome page.

11. Select the No, do not export the private key option and click Next.

12. Select DER encoded binary X.509 (.CER) and click Next.

13. Type a path and filename for the target certificate file (e.g. C:\sccm_proxy.cer) and click Next.

14. Review the export summary and click Finish to complete the wizard.

15. If the Configuration Manager Proxy and the Configuration Manager console are running on different computers, copy the certificate file to the server running the console.

How to import a certificate into Configuration Manager 2007

If you are using Microsoft System Center Configuration Manager 2007:

1. Run the Configuration Manager Console.

2. In the console, navigate to System Center Configuration Manager / Site Database / Site Management / <site name> / Site settings / Certificates.

3. Click ISV Proxy.

4. Right-click the PARALLELS CONFIGURATION MANAGER PROXY certificate and then click the Renew Certificate item in the pop-up menu.

5. Click the Browse button and select the certificate (the file with the “.cer” extension) that you exported earlier.

6. Click Apply and then click OK.

7. Reconfigure the Configuration Manager Proxy using the configuration utility:  Start > All Programs > Parallels > Parallels Mac Management for Microsoft SCCM > SCCM Proxy Configuration Utility.

8. Re-register Mac clients.

How to import a certificate into Configuration Manager 2012

If you are using Microsoft System Center Configuration Manager 2012:

1. Run the Configuration Manager console. 

2. In the console, navigate to Administration / Overview / Security / Certificates.

3. Right-click the PARALLELS CONFIGURATION MANAGER PROXY certificate and click Renew Certificate in the pop-up menu. The Register or Renew ISV Proxy dialog opens.

4. Make sure that the Renew certificate for an existing ISV proxy option is selected.

5. Click the Browse button and select the certificate file (the file with the “.cer” extension) that you exported earlier. 

6. Click OK.  

7. Reconfigure the Configuration Manager Proxy using the configuration utility: Start > All Programs > Parallels > Parallels Mac Management for Microsoft SCCM > SCCM Proxy Configuration Utility.

8. Re-register Mac clients.