Rate This Document
Findability
Accuracy
Completeness
Readability

Regenerating HAF Keys

For security purposes, you are advised to periodically update keys based on security requirements to improve system security.

  1. Use SmartKit to regenerate a certificate on the server or client.

    Regenerating an HAF key is to regenerate a certificate private key and certificate. Because the certificate private key matches the certificate, the two files need to be updated at the same time.

    Parameter

    Description

    Task Name

    Regenerating a node key

    Task Description

    Regenerating the key of the current node

    Run Directory

    /

    Run Command

    • On an offload node:

      su -s /bin/bash - haf -c "haf-tool cert --generate --offload"

    • On a host node:

      /opt/haf-host/tools/haf-tool cert --generate --host

    Whether to Check Return Code

    Yes

    Expected Return Code

    0

  2. Use SmartKit to restart the HAF service process and application service.