Backup certitficates from vManage's cluster

[dijix1990]

I have vManage's cluster with Enterprise certificate, and I want to know is it possible to backup certificates from vManage's? 

for example, if I want to deploy new vmanage and I would like to reuse certificates from old vmanage (csr request and cer file)

[dijix1990]

I thought about it after adding a new manage to the cluster, and this manager lost his certificate. I have no idea why

My way was: (Before it worked fine)

1. Deploy new vManage

2. Generate CSR on web new vmanage

3. Get certificate

4. Install certificate

5. Add new vmanage to cluster

[Kanan Huseynli · Accepted solution]

Hi,

when CSR is generated only public key is attached to it. Device still have private key inside OS. So, there is no way to re-use them same CSR/ Certificate for other vManage (for clustering or for disaster recovery).

In clustering or in DR each vManage device should have its own certificate.

Below document explains cluster creation and troubleshooting:

https://www.cisco.com/c/en/us/solutions/collateral/enterprise-networks/sd-wan/white-paper-c11-741440.html

[dijix1990]

It's pity, thanks.. Before cli was closed I can do that, but now root access isn't permitted