Reestablishing client node and administrative client communication when cert.kbd or cert.sth files are missing

When you are restoring a server, you must distribute the new server certificate to client nodes and administrative clients to reestablish communication with the server that is being restored.

Before you begin

Complete the steps for Restoring the server database and master encryption key files.

About this task

When the server that is being restored is started, and the cert.kbd or cert.sth files are missing, the server generates new files that contain a new server certificate and private key. You must distribute the new server certificate so that client nodes and administrative clients can communicate with the server that is being restored.

Complete the following steps to distribute the new certificate to client nodes and administrative clients:

1. On all client nodes and administrative clients that are associated with the restored server, delete all dsmcert.idx files.
2. Distribute the new certificate to the client nodes and administrative clients by taking one of the following actions:
   • Manually add the new certificate to the client nodes and administrative clients. For more information about adding the certificate manually, see Configuring IBM Storage Protect client/server communication with Secure Sockets Layer.

   • Automatically distribute the new certificate from the server that is being restored by issuing the following commands:

     • update node node_name sessionsecurity=transitional

     • update admin admin_name sessionsecurity=transitional

     For more information about securing communication by using SSL, see Configuring storage agents, servers, clients, and the Operations Center to connect to the server by using SSL.