Exporting CSR Files

Export CSR files of offload nodes (ceph1, ceph2, and ceph3) to the CA server, and execute the service flow.

1. Select all offload nodes and click Configure Service.

   

2. Select Custom and click Next.

   

3. Select Command Execution and click Add a Task.

   

4. Set task 1 parameters and click Save.
   

   Table 1 Parameter description

   Parameter	Description
   Task Name	Exporting CSR files of offload nodes
   Task Description	Exporting CSR files of offload nodes to the CA server
   Run Directory	/
   Run Command	echo password | su -s /bin/bash - haf -c "haf-tool cert --server ca_server_ip --path ca_server_path --user ca_server_user --export --offload" NOTE: The script parameters are described as follows: password: Password of the CA server for issuing certificates. ca_server_ip: IP address of the CA server for issuing certificates. ca_server_path: Certificate issuing path of the CA server, for example, /home/ca_server/demoCA. ca_server_user: User name for logging in to the CA server for issuing certificates. "echo password |" is a temporary method used by SmartKit due to interactive bugs. If you use the CLI tool, you do not need to add it.
   Whether to Check Return Code	Yes
   Expected Return Code	0