Juniper SRX 5800, Hardware Manual

Page: 315 / 536

10. If the Routing Engine was replaced on one of the nodes in a chassis cluster, then you need to copy
certificates and key pairs from the other node in the cluster:
a. Start the shell interface as a root user on both nodes of the cluster.
b. Verify files in the /var/db/certs/common/key-pair folder of the source node (other node in the
cluster) and destination node (node on which the Routing Engine was replaced) by using the following
command:
ls -la /var/db/certs/common/key-pair/
c. If the same files exist on both nodes, back up the files on the destination node to a different location.
For example:
root@SRX-B% pwd
/var/db/certs/common/key-pair
root@SRX-B% ls -la
total 8
drwx------ 2 root wheel 512 Jan 22 15:09
drwx------ 7 root wheel 512 Mar 26 2009
-rw-r--r-- 1 root wheel 0 Jan 22 15:09 test
root@SRX-B% mv test test.old
root@SRX-B% ls -la
total 8
drwx------ 2 root wheel 512 Jan 22 15:10
drwx------ 7 root wheel 512 Mar 26 2009
-rw-r--r-- 1 root wheel 0 Jan 22 15:09 test.old
root@SRX-B%
d. Copy the files from the /var/db/certs/common/key-pair folder of the source node to the same
folder on the destination node.
NOTE: Ensure that you use the correct node number for the destination node.
e. In the destination node, use the ls –la command to verify that all files from the
/var/db/certs/common/key-pair folder of the source node are copied.
f. Repeat Step b through Step e for the /var/db/certs/common/local and
/var/db/certs/common/certification-authority folders.
316