How to change the SSL certificate and key used by CPM
Important: This procedure should be performed when there are no Backups/DR/Cleanup/S3 Copy running.
If you need to install a CA SSL certificate, here are the instructions:
- Replace the 2 files in /opt/n2wsoftware/cert folder: cpm_server.crt and cpm_server.key
- You will need to use "sudo" to reach this folder. Please keep ownership and permissions of the file ("cp" will do it).
- At the end type: sudo service apache2 restart
Additional useful info
SSH:
In order to perform the above operations, you need to connect to the instance with SSH (your assigned private key and username: "cpmuser").
If you don't know how, this KB Article which show how to connect to CPM over SSH: How to connect to an instance in AWS using SSH
Linux:
If you are unfamilar with Linux command, this Ubuntu article explain about various commands: The Linux command line for beginners ,then command need here are mostly: cd, cp, ls, sudo, chmod
Certificate: here are some online tools to verify the validity of your certificate:
Related Articles
CPM instance hardening for vulnerability scans
In order to perform the below operations, you need to connect to the instance with SSH (your assigned private key and username: "cpmuser"). 1) (Only in v2.3 and up) To enforce usage of TLS 1.2, please edit the file /etc/apache2/mods-enabled/ssl.conf. ...Old versions (pre-v2.1.x) of CPM may fail to communicate with AWS with error "could not get object from aws" and reason "SSL3_GET_SERVER_CERTIFICATE:certificate verify failed"
Old versions (pre-v2.1.x) of CPM may fail to communicate with AWS, logging the following error: Error - (instance: i-12345678) could not get object from aws. Reason: [Errno 1] _ssl.c:503: error:14090086:SSL ...How to change the timezone of a CPM Server
The Timezone for a CPM Server can be changed in three ways 1. Run the timedatectl command on the CPM server (for pre-v2.3.x only) 2. Run the utility attached to this KB (for 2.3.0 and up) 3. If you running CPM 2.7 or greater see the directions at ...How to update the Ubuntu distribution on the CPM instance
In order to update the Ubuntu distribution on the CPM instance, you have to follow these instructions precisely (when no backup/DR is running): 1) Connect with SSH (using the user "cpmuser" and your private key). 2) Type: sudo apt-get update sudo ...N2WS 3.x - Backup may fail with "could not get object from aws. Reason: SSL validation for <Host> [SSL: CERTIFICATE_VERIFY_FAILED]"
Issue: Running backups may fail with the following error: ERROR: run_snapshots(agent.py:1796) (instance: i-1234567) could not get object from aws. Reason: SSL validation failed for https://ec2.us-east-1.amazonaws.com/ [SSL: ...