My Oracle Support Banner

Renewing expired certificates in Oracle Blockchain Platform Cloud Service (OBP) instances (Doc ID 2571520.1)

Last updated on MAY 12, 2022

Applies to:

Blockchain Platform Cloud Service - Version N/A to N/A
Information in this document applies to any platform.


Scope: This note is relevant only for customers whose certificate is expiring on and have received a notification from Oracle.

Action is required for smooth ongoing operation of  Oracle Blockchain Platform Cloud Service (OBP) instance(s). Reach out to support to find out the impacted OBP service instance names prior to proceeding with the following instructions. Please go through this document in its entirety and take appropriate actions.

The default administration and user certificates used in OBPCS instances expire and need to be renewed periodically. The new certificates have been added and are valid for 1 year.




 Following actions must be taken to ensure smooth operation of your OBP instance(s):

1. Download new admin certificate from OBP Console and verify the new certificate with command "openssl x509 -in <cert_file> -text -noout"

2. Replace existing certificate with the new one in your applications.

3. If your OBP instance is participating in a network of multiple instances/organizations, the network configuration needs to be updated as per below. This process is a subset of the process you used when the network was initially established:

    a. From your OBP “founder instance”, export orderer information into a JSON file.  This can be done from the Network tab of the OBP Console.
    b. From each of your OBP “participant” instance, export organization information into a JSON file from the “Network” tab of your OBP console.
    c. For all “participant” instances, import JSON file from the “founder” instance.
    d. For the “founder” instance, import JSON file from all “participant” instances.  The JSON file from participants can be imported one at a time.

4. If you have HL-Fabric Fabric Client SDK based client applications and client certificates are expiring, Reenroll client certificates to OPB instance.


Certificate related query can look the FAQ document <Note 2572708.1>



To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.