---
title: "ControlUp On-Premises Server: Create Certificate"
slug: "controlup-on-premises-server-create-certificate"
updated: 2026-04-12T09:17:56Z
published: 2026-04-12T09:17:56Z
canonical: "support.controlup.com/controlup-on-premises-server-create-certificate"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.controlup.com/llms.txt
> Use this file to discover all available pages before exploring further.

# ControlUp On-Premises Server: Create Certificate

Important! ControlUp On-Premises Server Certificate Expiring

The certificate that ControlUp supplied with all current ControlUp On-Premises (COP) Server installations expires May 3rd, 2025. To continue using your current COP Servers, perform the steps below to create a new certificate.

When installing a COP Server, a self-signed certificate is automatically installed to allow secure SSL communication for the IIS server. The certificate that we supplied with all current COP Server installations expires May 3rd, 2025. To continue using your current COP Servers, you must import a certificate file (*.pfx) to the IIS server.

Note that if you install a new COP environment and use version 8.8 MR2 or higher, you must also create a new certificate.

Perform the following steps to create a new self-signed certificate that will be valid until April 2035.

## Prerequisite

- Copy the PowerShell scripts from the attached file:

<editor360-custom-block data-preprocessing="true" data-sanitizationtags="p,span"><p><span class="file-view"> <span class="type type_9"></span> <span class="file-Name"> <a href="https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/Create%20and%20Deploy%20New%20Self%20Signed%20Certificate%20(2035).ps1" rel="noopener">Create and Deploy New Self Signed Certificate (2035).ps1</a> </span> </span></p></editor360-custom-block>

## Install New Certificate

1. Stop all ControlUp Monitors and any Real-Time DX Consoles running in your environment.
2. Open Windows Powershell ISE, select **Run as administrator**.
3. Load and run the Powershell scripts from the attached file **Create and Deploy New Self Signed Certificate (2035).ps1**. ![Powershell script exanple showing Create and Deploy New Self Signed Certificate](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/PSCOPCert.png)
4. Open IIS Manager and click Server Certificates: ![COP server Certificates selected](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/COPCertsIIS.png)
5. The new certificate information will appear below the old certificate, displaying the expiration date April 9th, 2035: ![COP Server Certificates with controlup server selected](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/COPServerCert.png)
6. Under the **Connections** home folder, open **Sites** > **ControlUp**.
7. In ControlUp Home, click **Bindings…**, select the **https** line, and click **Edit**: ![COP Site Bindings window with edit button selected](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/COPSiteBind.png)
8. Click **Select**, select **ControlUp Server (until 2035)** and click **OK.
9. Click **Restart**, or alternatively open a command prompt as an administrator and run the command `IISRESET`.
10. Restart the Console. If a Server Certificate Error message appears, click **Yes**.
11. Restart all Monitors. The bottom of the Console should display ”Connected to ControlUp central configuration”. **Monitors Settings** should display “Running-Master” and “Running”: ![COP Monitors status showing monitors running](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/COPCertsMonit.png)