DD Boost Certificate Replacement

1.  Generate a certificate signing request (CSR) in a Data Domain using:

adminaccess certificate cert-signing-request generate

2. Sign the CSR using a CA
3. Delete the existing certificate due to expiry.    

# adminaccess certificate show

Subject					Type			Application		Valid From					Valid Until					Fingerprint
---------------------	-------------	-----------		------------------------	------------------------	------------------------
localhost	host			https*			Mon Jan 19 11:53:34 2026	Fri Feb 19 11:53:34 2026	95:8D:B3:83:A8:C6:C1:7D:33:2B:93:F9:63:F5:09:5B:OB:8B:B1:AO
localhost	ca				trusted-ca		Thu Feb 02 14:13:38 2023	Wed Jan 31 14:13:38 2029	93:4B:19:41:D9:09:16:23:68:83:45:90:59:A8:F3:64:73:E6:3D:E7
localhost		imported-host	ddboost			Thu Feb 05 13:07:03 2026	Sat Feb 05 13:07:03 2028	FC:72:A5:B9:82:B2:79:D1:51:CC:58:23:31:6F:04:F1:99:5E:EA:2E

# adminaccess certificate delete imported-host-application ddboost 

4. Import the new certificate.

To prepare for importing a certificate, use SCP, FTP, or FTPS to copy the host or CA certificate to the directory /ddvar/certificates.

Optionally, copy and paste the entire PEM file of the host certificate, and then run the import command without specifying the certificate filename. An error is generated if mistakenly imported a mismatched certificate; for example, importing a host certificate as a CA certificate.

# adminaccess certificate import host application ddboost [file file-name]

or

# adminaccess certificate import host application ddboost 

5. Verified the import

# adminaccess certficate show

6. DD Boost service restart is required to load the new imported host certificate into memory for immediate use. 

#ddboost disable

#ddboost enable