Regenerating the Secure Sockets Layer (SSL) certificate

Edit online

You can add or modify the IBM Storage® Protect Plus server static network information, such as IP address or hostname after the initial deployment of IBM Storage Protect Plus server by regenerating the Secure Sockets Layer (SSL) certificate thumbprint. The SSL certificate is used for performing secure operations between the IBM Storage Protect Plus server and host agents.

Before you begin

For Hyper-V hosted IBM Storage Protect Plus servers, you must configure the static network information, such as IP address or hostname after the initial deployment of IBM Storage Protect Plus server. You must regenerate the SSL certificate after you configure the IBM Storage Protect Plus server.

For VMware hosted IBM Storage Protect Plus servers, the IP address or hostname is specified in the settings of IBM Storage Protect Plus virtual appliance before the initial deployment of the server. If the IP address or hostname of the IBM Storage Protect Plus virtual appliance changes after the initial deployment, you must regenerate the SSL certificate.

Procedure

To regenerate SSL certificate, complete the following steps:
  1. Log on to the IBM Storage Protect Plus console with the ID serveradmin by using Secure Shell (SSH) protocol, and issue the following commands:
    export CERTFILE=/opt/ECX/virgo/configuration/ecx-beta.crt
    export KEYFILE=/opt/ECX/virgo/configuration/ecx-beta.key
    sudo rm $CERTFILE
    sudo rm $KEYFILE
    sudo /opt/ECX/tools/scripts/generate_default_cert -c $CERTFILE -k $KEYFILE
  2. Reboot the IBM Storage Protect Plus appliance. After a system reboot, the certificate is ready for use.