Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

PowerScale OneFS Web Administration Guide

PDF

Replace the TLS certificate with a third-party CA-issued certificate

This procedure describes how to replace the existing TLS certificate with a third-party (public or private) certificate authority (CA)-issued TLS certificate.

When you request a TLS certificate from a certificate authority, you must provide information about your organization. It is recommended that you determine this information before you begin the process. See the TLS certificate data example section of this chapter for details and examples of the required information.
NOTE This procedure requires you to restart the isi_webui service, which restarts the web administration interface. It is recommended that you perform these steps during a scheduled maintenance window.
  1. Open a secure shell (SSH) connection to any node in the cluster and log in as root.
  2. List the current certificate: 
    isi certificate server list
    Output similar to the following is displayed, where <old cert ID> is the ID number of the current certificate: 
    ID Name Default 
<old cert ID> 
Isilon Systems True 
Total: 1
  3. Import the new certificate. This assumes the certificate is located in the /ifs/local directory. 
    isi certificate server import --certificate-
path=/ifs/local/cert.pem --certificate-key-
path=/ifs/local/key.pem --description='My new server 
certificate' –default
  4. Confirm the new certificate was imported: 
    isi certificate server list
    Output similar to the following is displayed, where <old cert ID> is the ID number of the current certificate: 
    ID Name Default 
<new cert ID>
True 
<old cert ID>
Isilon Systems False 
Total: 2
  5. Remove the old certificate: 
    isi certificate server delete --id=<old cert ID>
  6. Confirm the deletion: 
    Are you sure you want to delete this certificate (ID: <old cert ID>)?? (yes/[no]): yes
  7. Confirm the new certificate is the only one present: 
    isi certificate server list 
ID Name Default 
<new cert ID>  True 
Total: 1
    NOTE If you have multiple certificates, set the default one after you replace the old one: 
    isi certificate settings modify --default-https-certificate=<certificate id>

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\