Maintenance Tasks
470
Titan SiliconServer
4.
Restart the web server (tomcat) when prompted so that it may pick up the new SSL
certificate. When prompted to overwrite the existing certificate, enter '
y
'
5.
To view and verify the contents (SSL certificate and Trust Chain) of the keystore, type:
sudo cert-showall.sh
6.
Close and restart any browsers used to connect to the SMU. This is required to purge the
browser of any previously negotiated SSL session values.
When logging into the SMU web UI, the new SSL Certificate should be provided.
7.
Now propagate the new SSL certificate to all managed servers.
Go to Home > SMU Administration > Managed SiliconServers.
For each server, click "details" and then "OK".
Restore the Default SMU Certificate
If troubles are encountered when trying to create/import an SSL certificate, the SMU's default
certificate may be restored.
To Restore the Default Certificate
At any time a custom SSL certificate with the default, self-signed certificate, can be replaced.
1.
Log onto SMU (through
ssh
or it is serial port) as user manager and type:
sudo cert-gendefault.sh
Enter the manager password when prompted.
2.
Restart the web server (tomcat) when prompted so that it may pick up the new SSL
certificate.
3.
Close and restart any browsers used to connect to the SMU. This is required to purge the
browser of any previously negotiated SSL session values.
When logging into the SMU web UI, the new SSL Certificate should be provided.
4.
Now propagate the new SSL certificate to all managed servers.
Go to Home > SMU Administration > Managed SiliconServers.
For each server, click "details" and then "OK".
Accepting Self-Signed Certificates
If a self-signed certificate has been installed, users receive a security alert similar to the
following when they first access the Web Manager over a secure connection: