Updating Workflow Manager Self-Signed SSL Certificate to CA SSL Certficate

Question

We have a security requirement to disallow Self-Signed SSL certificates on our network. We currently have Workflow Manager configured with auto-generated SSL certificates. I understand that changing Workflow Manager certificates from self-signed to CA issued SSL is not supported. That is acceptable. However, I need to provide MS documentation stating the scenario is not supported. As of yet, I am unable to find any MS documentation stating changing a current Workflow Manager auto-generated SSL to a CA issued SSL is not supported. All I need is a link to a MS white paper/article confirming the configuration limitation so that I can provide the vendor justification for the exception in this case.

Thanks,

James W

Answer 1

Hi @James Whitlock

I didn’t find articles from Microsoft. But this article was provided by Microsoft MVP.

According to this article, we can’t change from an auto-generated Outbound Signing Certificate to a CA issued Outbound Signing Certificate. This is a significant constraint of Workflow Manager configuration, even though we can update the certificate, workflows will get “stuck” in their initial stage after doing so, as the Workflow Manager farm thinks it’s an auto-generated certificate.

---

If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.