Regenerating HAF Keys

For security purposes, you are advised to periodically update keys based on security requirements to improve system security.

Regenerating an HAF key is to regenerate a certificate private key and certificate. Because the certificate private key matches the certificate, the two files need to be updated at the same time.

The following steps use the offload nodes with the HAF service as an example. For host nodes and the offload nodes with the HAF library, perform similar steps.

1. Use SmartKit to regenerate a certificate on the server or client node.

   Parameter	Description
   Task Name	Regenerating a node key
   Task Description	Regenerating the key of the current node
   Run Directory	/
   Run Command	/home/omm/haf-install/haf-target/tools/haf-tool cert --generate
   Whether to Check Return Code	Yes
   Expected Return Code	0

2. Use SmartKit to restart the HAF service process and application service.