Table of ContentsView in Frames

Removing old SSL certificates before installing new ones

If you want to update or reinstall the SSL certificates used by Storage Encryption, you must first manually remove the old ones to ensure that the new ones are used.

Steps

  1. Access the nodeshell by entering the following command: system node run -node node_name
  2. Remove the IP addresses of all key management servers by entering the following command for each key management server: key_manager remove -key_server key_server_ip_address
  3. Remove the storage system's client certificates by entering the following commands: keymgr delete cert client_private.pemkeymgr delete cert client.pem
  4. Remove all installed key management server certificates by entering the following commands for each key management server: keymgr delete cert key_server_ip_address_CA.pem
  5. Exit the nodeshell and return to the clustershell by entering the following command: exit