renew 3par Expired self signed Certificates

[bunky1966]

Hi we have a couple of 3par 7200 arrays, and use VMWARE SRM for fail-over using the HP SRA.

we tried to test a fail over today, but got an certificate error

i did a CLI to both 3par arrays and did a showcert , and both certificates have expired.

Can anyone point me in the right direction on how to renew these self signed certificates ?

ive done some googling but cannot find anything.!

any help appreciated

Thanks
Mark Green

[Leif]

Is this what you are looking for?

createcert - Create self-signed SSL certificate or a certificate signing request (CSR) for the HP 3PAR Storage System SSL services.

SYNTAX
createcert <SSL service> {-csr|-selfsigned} [-f] [-keysize <keysize>] [-days <days>] [<subject attribute options>] [<CSR filename>]

[drunkmet]

here's how i do it:

get the common names of the expired certs

Code: Select all

showcert

for each expired cert renew them. for example the unified-server cert:

Code: Select all

createcert unified-server -selfsigned -CN "<CERT CN>"

[bunky1966]

Thanks guys, all sorted.

[JamesRRR]

Any impact on existing management/clients from renewing the self signed certificates?

[bunky1966]

Any impact on existing management/clients from renewing the self signed certificates?

Hi no , no impact at all

regards
Mark

[mujzeptu]

Is this the same certificate and process for VVOL's cert expiring and VASA provider?

[dsobkowiak]

I'm receiving a permissions denied when attempting to create the cert. I'm logged in as 3PARCUST. Any assistance would be appreciated.

[MammaGutt]

use 3paradm on the 3par. 3parcust is a user on legacy SP.

[adminguy]

I was able to createcert unified-server -selfsigned -CN <Common Name> -SAN IP:<IP Address> and it said the following services will be restarted if currently running: cim & wsapi. I confirmed and then after a little time went back to Primera & 3PAR SSMC portal at port 8443 and signed into the Administrator Console again. However, the old certificate remains. I used showcert again and the new certificate is there. Then i did showcert -service unified-server -type cert -pem and got the new certificate to paste into Actions > Manage Certificates > Add Certificate, it validated, clicked OK. Again, the old certificate remains. What do I need to do?