One of our customer was using self signed certificates fro RTS for last two years. When the certificate expired this time, we recommended to switch to SSL issued by a CA and a certificate was purchased from Go Daddy. We re-provisioned the RTS web service to update the new certificate.
All the production POS machines are in disconnected environment ( not connected to Internet).Initially we were having issue with all RTS service. The POS terminal was unable to authenticate new certificate because it dint have root certificate authority information as windows updates were turned off. Running windows update on 200+ POS terminals was impossible for the customer. After many trial and error experiments, we found that if you connect the POS terminal to internet once and do the inventory lookup, windows will automatically download required root certificate authority information automatically and after which inventory lookup will work without internet.
Now the customer is facing latency in Real Time Service transactions. The users are of the opinion that the loyalty transactions used to process faster when they were on a self signed certificate. I assume the SSL handshake between the terminal and the web server is taking long. Anyone experienced the same ?