Avamar: Replace ConnectEMC HTTPS root CA

GoAV

1. Download and install Avamar: GoAV tool (See this article for instructions on downloading and installing GoAV.)
2. Switch to the root user:

su -

3. Once GoAV is installed, run the following command to replace the expiring ConnectEMC HTTPS root CA with the new root certificate.

./goav system connectemc refresh-ca

root@avamar:/home/admin/#: ./goav system connectemc refresh-ca
===========================================================
GoAv    :        1.79
Avamar  :        19.4
Date    :        05 Aug 2024 13:10 CDT
===========================================================
COMMAND :  ./goav system connectemc refresh-ca
NOTE: This is not an official tool
===========================================================
Replace ConnectEMC HTTPS Root CA: /opt/connectemc/certs/https-ca-cert.pem
Updating ownership to root:root
Restarting ConnectEMC service

Manually

1. Check that the Avamar server version is 19.9 or earlier.
2. Check that the Avamar is configured for ConnectEMC HTTPS transport.
3. Switch to the root user.

su -

4. Copy the new root certificate to the Avamar server in a file, which is an attachment on the article. 
5. Replace the current ConnectEMC HTTPS root CA file with the new file created.

cp <new_root_certificate> /opt/connectemc/certs/https-ca-cert.pem

6. Update permissions and ownership of the file.

chown root:root /opt/connectemc/certs/https-ca-cert.pem
chmod 755 /opt/connectemc/certs/https-ca-cert.pem

7. Restart ConnectEMC.

systemctl restart connectemc