Avamar: Replace ConnectEMC HTTPS root CA

Summary: On Avamar versions 19.9 and earlier, the ConnectEMC HTTPS root CA expires in March 2025. This article shows how to replace the expiring certificate with the new root certificate.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Instructions

Note: There is an attachment for the manual procedure added to this article.

This procedure is only required for Avamar Servers on version 19.9 and earlier using ConnectEMC HTTPS transport type.

Replace the expiring ConnectEMC HTTPS root CA with either the GoAV tool, or manually.

GoAV

  1. Download and install Avamar: GoAV tool (See this article for instructions on downloading and installing GoAV.)
  2. Switch to the root user:
su -
  1. Once GoAV is installed, run the following command to replace the expiring ConnectEMC HTTPS root CA with the new root certificate.
./goav system connectemc refresh-ca
Example: 
root@avamar:/home/admin/#: ./goav system connectemc refresh-ca
===========================================================
GoAv    :        1.79
Avamar  :        19.4
Date    :        05 Aug 2024 13:10 CDT
===========================================================
COMMAND :  ./goav system connectemc refresh-ca
NOTE: This is not an official tool
===========================================================
Replace ConnectEMC HTTPS Root CA: /opt/connectemc/certs/https-ca-cert.pem
Updating ownership to root:root
Restarting ConnectEMC service


Manually

  1. Check that the Avamar server version is 19.9 or earlier.
  2. Check that the Avamar is configured for ConnectEMC HTTPS transport.
  3. Switch to the root user.
su -
  1. Copy the new root certificate to the Avamar server in a file, which is an attachment on the article. 
  2. Replace the current ConnectEMC HTTPS root CA file with the new file created.
cp <new_root_certificate> /opt/connectemc/certs/https-ca-cert.pem
  1. Update permissions and ownership of the file.
chown root:root /opt/connectemc/certs/https-ca-cert.pem
chmod 755 /opt/connectemc/certs/https-ca-cert.pem
  1. Restart ConnectEMC.
systemctl restart connectemc

Affected Products

Avamar
Article Properties
Article Number: 000227555
Article Type: How To
Last Modified: 03 Feb 2025
Version:  6
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.