Follow

Importing LRS Certificate into Maytas

Non Hosted Provider LRS Setup

 

How to Configure the LRS with New LRS Certificate

The LRS are now issuing new LRS certificates for use with the LRS and PLR web services which are utilised by Maytas. Should you have received your new LRS cert, you have until the 21st of September 2019 to install the new LRS certificate and update your Maytas configs.

There is no need to remove the previous certificate as the new certificate can run alongside the old certificate.

If you have recently requested a certificate from the LRS, you may already have a copy of the new certificate. If you do not have a certificate (either old or new), you would need to request a certificate as below initially:
 

Requesting a certificate from the LRS (this does not need to be done if you already have your LRS certificate)

Initially you will need to request a certificate from the LRS to access the LRS Web Service. The required form can be downloaded here. This will need to be downloaded, completed and returned to: lrssupport@learningrecordsservice.org.uk.

Further information on the above can be located here: Online Wiki: Learning Records Service (LRS)
 

Installing the New LRS Certificate

Once you receive the certificate, the steps below should be carried out on the server on which Maytas 5 Server Manager is installed.

1.    Import the certificate file.  

a.    Run mmc.exe
b.    File – Add/remove snap in
c.    Add the “Certificates” snap in.  Select “Computer Account”
d.    Select Local Computer
e.    Import the certificate to “Trusted publishers”. Right click on the item in the tree and select All Tasks | Import. In the wizard, browse to your certificate and input the password when prompted. Accept the defaults on the following screens and click Finish.
f.    Repeat step c, selecting the “My Current User” option. 
g.    Within the Certificates – Current User tree, repeat step e and import to “Personal”
h.    Browse to the web service URL in Internet Explorer. It is extremely important to run IE as admin. (https://ws.lrs.education.gov.uk/MIAPWebService/services/LearnerService), you should then see a pop up: 

User-added image

*The above pop up will now reference 'wsclient00000.lrs.education.gov.uk'

i.    Click ‘Click here to view certificate properties’, click ‘Install Certificate’.
j.    Windows Server 2012 and above - When prompted to select the store location, select Local Machine and then Next. Then, when prompted to select the certificate store, select ‘Place all certificates in the following store’ and click Browse, tick the ‘Show Physical stores’ option and select ‘Trusted Root Certification Authorities’ and then underneath it, ‘Registry’. Click OK and continue through the wizard.

It is imperative that the above is followed to the letter. Should the certificate be installed in the wrong folder or via a different method, this will prevent the LRS / PLR tools from working within Maytas.

 

LRS Configs within Maytas

The certificate should now be installed and you should be in a position to update/populate the LRS configs within Maytas by following the below:

2.    M Button > Options > LRS Tools (under the Maytas 5 heading)

3.    Tick each of the configs located under the LRS heading

4.    Populate each of the configs with the required value, you will need the below information:

  • UKPRN (Unique to provider)
  • LRS Service URL - https://ws.lrs.education.gov.uk/LearnerService.svc 
  • LRS Username – This is the username you have been issues by the LRS to access the LRS Web Service and may differ from the username allocated to access the LRS website.
  • LRS Password - This is the password you have been issues by the LRS (usually specified on the LRS Live Connection Form submitted to the LRS) to access the LRS Web Service and may differ from the password allocated to access the LRS website. It should also be 16 characters in length.
  • Certificate Friendly Name – This should be a variation of ‘wsclient00000.lrs.education.gov.uk’ or blank. This is dependent on the friendly name of the cert once installed.
  • Certificate Subject Name - wsclient00000.lrs.education.gov.uk
  • Organisation Ref – This is usually the last 5 digits of your UKPRN with a U at the beginning but the LRS may need to confirm this with you.

Once you have entered each of the above configs, click OK, perform a sync, restart Maytas and test the LRS tool via a learner record. If successful, force a sync to pass the config changes out to all users. This should then be useable by other users when they restart Maytas. If unsuccessful, an error message will be received:

An error message based on an SSL / TSL error is usually the result of an issue with the certificate installation. An error based on credentials indicates that one or more of the credentials within the configs are incorrect and should be double checked with the LRS.

 

Update June 2019:

Setting Up the LRS - On Premise Customers

Please be advised that the current set of LRS web services have expired.

There is no need to remove the previous certificate as the new certificate can run alongside the old certificate.

If you have recently requested a certificate from the LRS, you may already have a copy of the new certificate. If you do not have a certificate (either old or new), you would need to request a certificate as below initially:

Requesting a certificate from the LRS

Please be advised that the current set of LRS web services have expired.  If you are experiencing problems with the web services, as the LRS are seeing quite a lot of “Expired certificate” errors on their firewalls.  Please check that the latest certificate has been installed.     

New functionality has been developed and implemented, whereby, super users are now able to download the web service certificate from the LRS for their organisation.  

Super users should take the following steps in order to collect the new LRS web service certificate: 
  1. Log onto LRS
  2. Ensure your email address has been validated
  3. As a super user, you will see a new menu option “Web services”
  4. Click on “Certificate Management”
  5. Download the certificate
  6. The password will be emailed to your email address

Installing the New LRS Certificate

Follow the instructions above.

LRS Configs within Maytas

The certificate should now be installed and you should be in a position to update/populate the LRS configs within Maytas by following the next instructions above.
 
Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

0 Comments

Article is closed for comments.
Powered by Zendesk