Page 1 of 1

renew 3par Expired self signed Certificates

Posted: Tue Jul 04, 2017 5:50 am
by bunky1966
Hi we have a couple of 3par 7200 arrays, and use VMWARE SRM for fail-over using the HP SRA.

we tried to test a fail over today, but got an certificate error

i did a CLI to both 3par arrays and did a showcert , and both certificates have expired.

Can anyone point me in the right direction on how to renew these self signed certificates ?

ive done some googling but cannot find anything.!

any help appreciated

Thanks
Mark Green

Re: renew 3par Expired self signed Certificates

Posted: Tue Jul 04, 2017 6:09 am
by Leif
Is this what you are looking for?

createcert - Create self-signed SSL certificate or a certificate signing request (CSR) for the HP 3PAR Storage System SSL services.

SYNTAX
createcert <SSL service> {-csr|-selfsigned} [-f] [-keysize <keysize>] [-days <days>] [<subject attribute options>] [<CSR filename>]

Re: renew 3par Expired self signed Certificates

Posted: Wed Jul 05, 2017 6:35 pm
by drunkmet
here's how i do it:

get the common names of the expired certs

Code: Select all

showcert


for each expired cert renew them. for example the unified-server cert:

Code: Select all

createcert unified-server -selfsigned -CN "<CERT CN>"

Re: renew 3par Expired self signed Certificates

Posted: Thu Jul 06, 2017 2:48 am
by bunky1966
Thanks guys, all sorted.

Re: renew 3par Expired self signed Certificates

Posted: Mon Dec 04, 2017 1:57 pm
by JamesRRR
Any impact on existing management/clients from renewing the self signed certificates?

Re: renew 3par Expired self signed Certificates

Posted: Tue Dec 05, 2017 3:01 am
by bunky1966
JamesRRR wrote:Any impact on existing management/clients from renewing the self signed certificates?


Hi no , no impact at all

regards
Mark

Re: renew 3par Expired self signed Certificates

Posted: Fri Mar 16, 2018 5:00 pm
by mujzeptu
Is this the same certificate and process for VVOL's cert expiring and VASA provider?

Re: renew 3par Expired self signed Certificates

Posted: Wed Aug 03, 2022 8:32 am
by dsobkowiak
I'm receiving a permissions denied when attempting to create the cert. I'm logged in as 3PARCUST. Any assistance would be appreciated.

Re: renew 3par Expired self signed Certificates

Posted: Thu Aug 04, 2022 11:31 am
by MammaGutt
use 3paradm on the 3par. 3parcust is a user on legacy SP.

Re: renew 3par Expired self signed Certificates

Posted: Tue Dec 10, 2024 10:03 am
by adminguy
I was able to createcert unified-server -selfsigned -CN <Common Name> -SAN IP:<IP Address> and it said the following services will be restarted if currently running: cim & wsapi. I confirmed and then after a little time went back to Primera & 3PAR SSMC portal at port 8443 and signed into the Administrator Console again. However, the old certificate remains. I used showcert again and the new certificate is there. Then i did showcert -service unified-server -type cert -pem and got the new certificate to paste into Actions > Manage Certificates > Add Certificate, it validated, clicked OK. Again, the old certificate remains. What do I need to do?