When the Cloud Pak for Data self-signed
certificate is updated, the Db2 SSL
certificate also must be updated.
About this task
In Cloud Pak for Data version 5.0.0
Procedure
-
As default user db2uadm, disable the Wolverine high-availability monitoring process:
-
Deactivate the database, stop Db2, and
perform an ipclean process:
su - db2inst1 -c "db2 force application all && db2 deactivate db ${DBNAME} && db2stop force && rah 'ipclean -a'"
-
Reconfigure the Db2 SSL certificate to
pick up the changes to the Cloud Pak for Data
certificate:
su - db2inst1 -s /bin/bash -c "source /db2u/scripts/include/db2_ssl_functions.sh && rotate_ssl_certs"
-
Start Db2 and activate the
database:
su - db2inst1 -c "db2start && db2 activate db ${DBNAME}"
-
As default user db2uadm, re-enable Wolverine: