Guidelines for Updating the SSL key/certificate

Follow these steps to update the SSL key/certificate:

  1. On the configuration host, run securityconfig to create a new configuration in a directory in parallel to the standard configuration directory.

    
              
  2. On the configuration host, merge the truststore entries by using the config merge-trust command:

    java -jar KVHOME/lib/kvstore.jar securityconfig \
    config merge-trust -root <standard config dir> \
    -source-root <new config dir>
  3. In the security directory on the configuration host run the keytool command. The keytool prompts for the current password and then for a new password to set.

    keytool -storepasswd -keystore store.keys

    Securityconfig will prompt for the new password. The new password should match the new one provided earlier to the keytool command.

  4. If using a Password File store, skip ahead to the next step. To update the keystore password for wallets, use the following command:

    java -jar KVHOME/lib/kvstore.jar securityconfig \
    wallet secret -directory store.wallet -set -alias keystore

    Securityconfig will prompt for the new password. The new password should match the new one provided earlier to the keytool command.

  5. If using Password File stores instead of wallets, use the following command to update the keystore password:

    java -jar KVHOME/lib/kvstore.jar securityconfig \
    pwdfile secret -file store.pwd -set -alias keystore

    Securityconfig will prompt for the new password. The new password should match the new one provided earlier to the keytool command.

  6. Copy the updated store.keys file and either store.pwd or the contents of store.wallet to the security directory on each host and restart the Storage Node using the following commands:

    java -jar KVHOME/lib/kvstore.jar stop -root KVROOT 
    java -jar KVHOME/lib/kvstore.jar start -root KVROOT&