Updating the Certificate

Run the following command to update the certificate. After the command is executed, enter the password for logging in to the remote server.

• On a host node:

  To update the certificate on a host node, restart the service process after the certificate is imported.

• On an offload node:

  su -s /bin/bash - haf -c "haf-tool cert --server ca_server_ip --path ca_server_path --user ca_server_user --update --offload"

  The certificate update operation on an offload node will synchronize the service certificate and CA certificate to the local host and make them take effect.

1. Use SmartKit to update the certificate on the server or client.

   Parameter	Description
   Task Name	Updating the node certificate
   Task Description	Updating the certificate of the current node on the CA server.
   Run Directory	/
   Run Command	On an offload node: su -s /bin/bash - haf -c "haf-tool cert --server ca_server_ip --path ca_server_path --user ca_server_user --update --offload" On a host node: /opt/haf-host/tools/haf-tool cert --server ca_server_ip --path ca_server_path --user ca_server_user --update --host After the preceding command is executed, restart the service process.
   Whether to Check Return Code	Yes
   Expected Return Code	0

   • Update the certificate on an offload node.

     

   • Update the certificate on a host node.
2. Restart the service process to complete the update.