Symantec Veritas Cluster Server One, Installation Manual

Page: 62 / 210

62 Accessing the web console
Recreating the SSL certificate
Recreating the SSL certificate
The VCS One installer creates an SSL certificate on each Policy Master system.
The SSL certificate works if you access the VCS One web console using a VCS
One Policy Master virtual IP address.
With Internet Explorer 7, using a host name that resolves to a VCS One Policy
Master virtual IP address when accessing the VCS One web console may display
invalid SSL certificate messages.To prevent these messages, you must recreate
the SSL certificate.
This section provides the general steps and resources needed to recreate an SSL
certificate. For more detailed information about SSL-related tasks, see the
Apache Tomcat 6.0 SSL Configuration instructions available on the Internet.
To recreate the SSL certificate, you can use Java Keytool, or another tool of your
choice. For your convenience, the Java Keytool utility is included in the VCS One
installation, and located at:
/opt/VRTSvcsone/jre/bin
To recreate the SSL certificate
1 Locate the key store containing the certificate that the VCS One installer
created at:
/opt/VRTSvcsone/web/tomcat/cert
2 Follow the Apache Tomcat 6.0 SSL Configuration instructions for creating
an SSL certificate.
3 At the prompt, enter the information for the host name that you want to use
to access the VCS One web console.
4 To restart the VCS One web console, use the
hastop
and
hastart
commands to take it offline and bring it online. Enter the following:
#
/opt/VRTSvcsone/bin/hastop -web
#
/opt/VRTSvcsone/bin/hastart -web
5 From the browser, choose to install the new certificate.