DX Unified Infrastructure Management

  • 1.  remove existing ssl cert from wasp.keystore

    Posted Jan 30, 2017 10:10 AM

    Hello Team

     

    We are uploading new ssl certificate root and intermediate on ump but its failing as the old one already exist. Please how can i remove the old root n intermediate certificates? so i will import new cert



  • 2.  Re: remove existing ssl cert from wasp.keystore

    Broadcom Employee
    Posted Jan 30, 2017 10:54 AM

    There are a couple of things you can do:

     

    1. You can use the keytool to delete the certificates (similar to importing them).  First you will want to use keytool -list to list the aliases in the keystore, then delete them as in the following example (which shows deleting the 'wasp' alias certificate):

     

    keytool -delete -alias wasp -keystore wasp_keystore.jks.

     

    2. You can stop the wasp probe, delete the existing keystore, and restart wasp.  Then, use the Probe Utility (CTRL+P in infrastructure manager) to run the callback called "ssl_reinitalize_keystore" vs. the wasp probe.  This will generate a new keystore (you must provide a new password.)



  • 3.  Re: remove existing ssl cert from wasp.keystore

    Posted Jan 30, 2017 11:54 AM

    hi jallen

     

    thanks for support

     

    For no.1

     

    I'm getting an error 'keytool' is not recognised .

     

    Please advise

     

    For no.2

     

    Do u mean to delete wasp.keystore file which is present in

    probes/service/wasp/conf ?

     

    Please confirm

     

    On 30-Jan-2017 8:54 pm, "JAllen11" <communityadmin@communities-mail.ca.com>



  • 4.  Re: remove existing ssl cert from wasp.keystore
    Best Answer

    Broadcom Employee
    Posted Jan 30, 2017 12:13 PM

    The keytool will be located on the UMP server in a folder like :

     

    /Nimsoft/jre/jre7/bin/keytool.exe

     

    The wasp.keystore will be in /probes/service/wasp/conf/

     

    You will probably have to specify the exact path(s).



  • 5.  Re: remove existing ssl cert from wasp.keystore

    Posted Jan 30, 2017 12:21 PM

    ok i will go for the second option. i will stop wasp and delete

    wasp.keystore file

     

     

     

    On 30-Jan-2017 10:14 pm, "JAllen11" <communityadmin@communities-mail.ca.com>