Page 1 of 1
renew 3par Expired self signed Certificates
Posted: Tue Jul 04, 2017 5:50 am
by bunky1966
Hi we have a couple of 3par 7200 arrays, and use VMWARE SRM for fail-over using the HP SRA.
we tried to test a fail over today, but got an certificate error
i did a CLI to both 3par arrays and did a showcert , and both certificates have expired.
Can anyone point me in the right direction on how to renew these self signed certificates ?
ive done some googling but cannot find anything.!
any help appreciated
Thanks
Mark Green
Re: renew 3par Expired self signed Certificates
Posted: Tue Jul 04, 2017 6:09 am
by Leif
Is this what you are looking for?
createcert - Create self-signed SSL certificate or a certificate signing request (CSR) for the HP 3PAR Storage System SSL services.
SYNTAX
createcert <SSL service> {-csr|-selfsigned} [-f] [-keysize <keysize>] [-days <days>] [<subject attribute options>] [<CSR filename>]
Re: renew 3par Expired self signed Certificates
Posted: Wed Jul 05, 2017 6:35 pm
by drunkmet
here's how i do it:
get the common names of the expired certs
for each expired cert renew them. for example the unified-server cert:
Code: Select all
createcert unified-server -selfsigned -CN "<CERT CN>"
Re: renew 3par Expired self signed Certificates
Posted: Thu Jul 06, 2017 2:48 am
by bunky1966
Thanks guys, all sorted.
Re: renew 3par Expired self signed Certificates
Posted: Mon Dec 04, 2017 1:57 pm
by JamesRRR
Any impact on existing management/clients from renewing the self signed certificates?
Re: renew 3par Expired self signed Certificates
Posted: Tue Dec 05, 2017 3:01 am
by bunky1966
JamesRRR wrote:Any impact on existing management/clients from renewing the self signed certificates?
Hi no , no impact at all
regards
Mark
Re: renew 3par Expired self signed Certificates
Posted: Fri Mar 16, 2018 5:00 pm
by mujzeptu
Is this the same certificate and process for VVOL's cert expiring and VASA provider?
Re: renew 3par Expired self signed Certificates
Posted: Wed Aug 03, 2022 8:32 am
by dsobkowiak
I'm receiving a permissions denied when attempting to create the cert. I'm logged in as 3PARCUST. Any assistance would be appreciated.
Re: renew 3par Expired self signed Certificates
Posted: Thu Aug 04, 2022 11:31 am
by MammaGutt
use 3paradm on the 3par. 3parcust is a user on legacy SP.
Re: renew 3par Expired self signed Certificates
Posted: Tue Dec 10, 2024 10:03 am
by adminguy
I was able to createcert unified-server -selfsigned -CN <Common Name> -SAN IP:<IP Address> and it said the following services will be restarted if currently running: cim & wsapi. I confirmed and then after a little time went back to Primera & 3PAR SSMC portal at port 8443 and signed into the Administrator Console again. However, the old certificate remains. I used showcert again and the new certificate is there. Then i did showcert -service unified-server -type cert -pem and got the new certificate to paste into Actions > Manage Certificates > Add Certificate, it validated, clicked OK. Again, the old certificate remains. What do I need to do?