Installation Guide

Back Next

Update the node to add or replace the certificates

If you plan to migrate the domain to a different machine, you need to ensure that the domains uses TLS protocol and to add or replace existing certificates with the ones that you generated.

Convert the domain to use TLS

If the domain doesn't use TLS protocol, run the following infacmd to convert it to TLS:

./infacmd.sh updateDomainOptions -dn <domain name> -un <user name> -pd <password> -sdn <security domain> -do TLSMode=true

Add or replace certificates

To add or replace TLS certificates with the ones that you generated, perform the following tasks:

Shut down the domain.

Run the following command infasetup command:

./infasetup.sh updateGatewayNode -tls true
-nk <Custom keystore directory>
-nkp <The keystore .jks file password> 
-nt <Custom truststore directory>
-ntp <truststore .jks file password>
-hs <HTTPS port number to secure connection to the Administrator tool>
-kf <Keystore file that contains the keys and certificates>
-kp <A plain-text password for the keystore file>

Rename Saved Search

Table of Contents

Installation Guide

Installation Guide

Update the node to add or replace the certificates

Update the node to add or replace the certificates

Convert the domain to use TLS

Add or replace certificates