Importing Certificates

Import certificates issued by the CA server to host nodes (agent1, agent2, and agent3).

/opt/haf-host/tools/haf-tool cert --server ca_server_ip --path ca_server_path --user ca_server_user --import --host

[root@agent3]# /home/tempinstall/haf-host/tools/haf-tool cert --server xx.xx.xx.xx --path /home/ca_server/ --user root --import --host
please enter passwd:
[transfer ca crt Success]
[verify ca crt Success]
SHA1 Fingerprint=D9:16:7C:E2:86:D0:EB:51:DF:F4:BA:CF:9E:A3:60:38:D0:23:F7:58
[transfer host crt Success]
[verify host crt Success]
[delete host csr Success]

The script parameters are described as follows:

• ca_server_ip: IP address of the CA server for issuing certificates.
• ca_server_path: Certificate issuing path of the CA server.
• ca_server_user: User name for logging in to the CA server for issuing certificates.
• During certificate import, the CA certificate of the remote CA server is also imported.