cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

8574
Views
0
Helpful
4
Replies
Highlighted

[SOLVED] How to Update expired certificate for UCS Web Interface

Hi all!

 

I have resign existing request for my UCS Manager and update certificate in KeyRing. But I don't know how to restart UCS WebServer to apply new cert. Can anyone help?

4 REPLIES 4
Highlighted
Beginner

Re: How to Update expired certificate for UCS Web Interface

Hi, 

 

Step 1 UCS-A# scope security

Step 2 UCS-A /security # scope keyring default

Step 3 UCS-A /security/keyring # set regenerate yes

Step 4 UCS-A /security/keyring # commit-buffer

 

this will regen your keyring and clear the fault

 

-Tyler

 

 

Highlighted

Re: How to Update expired certificate for UCS Web Interface

May be this correct for self-signed default certificate, but we use CA signed certs.

 

I had fixed this with:

Via UCSM GUI (use IE, Chrome will not work correctly while cert expired):

0. Get and Resign existing request with CA

1. Upload signed cert to keyring and refresh browser to confirm that now keyring status changed from Expired to Valid.

Go to SSH:

2. UCS-A# scope system

3. UCS-A# scope services

4. UCS-A# disable cimcwebsvc

5. UCS-A# disable http

6. UCS-A# commit-buffer

7. UCS-A# enable cimcwebsvc

8. UCS-A# enable http

9. UCS-A# commit-buffer

 

After this refresh page in your favorite browser.

Highlighted
Beginner

Re: How to Update expired certificate for UCS Web Interface

Hello,

 

How to verify that the SSL certificate has been regenerated? Any show commands?

 

Thanks

Highlighted
Cisco Employee

Re: How to Update expired certificate for UCS Web Interface

scope security

show keyring detail

In the 'not after: ' section should be date in the future.

 

Kirk...

CreatePlease to create content
Content for Community-Ad
Cisco Community May 2020 Spotlight Award Winners

Cisco COVID-19 Survey