Byta certifikat i PowerProtect DD System Manager

2024-03-21 14:16

För att byta certifikat i PowerProtect DD System Manager behöver du först radera det gamla. För att lista vilka certifikat du har loggar du in via SSH.

sysadmin@localhost# adminaccess certificate show
Subject                Type            Application   Valid From                 Valid Until                Fingerprint
-----------------      -------------   -----------   ------------------------   ------------------------   -----------------------------------------------------------
localhost.domain.com   host            https*        Tue Apr 20 03:43:28 2021   Fri Apr 19 10:43:28 2024   65:8E:E0:D6:B9:13:78:A0:8D:40:E7:FC:FF:6C:60:28:95:A6:1F:B5
localhost.domain.com   ca              trusted-ca    Tue Apr 20 10:43:27 2021   Mon Apr 19 10:43:27 2027   A0:3F:D6:81:E6:75:38:6D:04:6A:27:FD:8F:4B:06:F5:15:19:E6:B4
localhost.riceri.se    imported-host   https         Mon Mar 11 13:51:19 2024   Sun Mar 30 13:51:19 2025   C1:6C:48:C7:7C:64:23:BE:13:33:17:D8:04:5B:3F:30:FE:3B:59:BF
-----------------      -------------   -----------   ------------------------   ------------------------   -----------------------------------------------------------

* In use by System Management Service

Radera det gamla certet

sysadmin@localhost# adminaccess certificate delete subject localhost.riceri.se
Certificate(s) with the following fingerprint(s) have "localhost.riceri.se" subject
C1:6C:48:C7:7C:64:23:BE:13:33:17:D8:04:5B:3F:30:FE:3B:59:BF

The following application(s) are using the certificate(s):
https

        Do you want to delete the certificate(s) for all the above applications(s)? (yes|no) [yes]: yes
Certificate(s) deleted.

Ladda upp det nya certet med hjälp av scp till Data Domainen, det måste heta .p12

scp certifikat.p12 sysadmin@192.168.200.100:/ddr/var/certificates/

Importera certifikatet du just laddat upp

sysadmin@localhost# adminaccess certificate import host application https file certifikat.p12
Enter password:

**   Importing the certificate will restart the http/https services and currently active http/https user sessions will be terminated.

        Do you want to import this certificate? (yes|no) [yes]: yes
Host certificate imported for applications(s) : "https".