How to change the SSL certificate and key used by CPM
Important: This procedure should be performed when there are no Backups/DR/Cleanup/S3 Copy running.
If you need to install a CA SSL certificate, here are the instructions:
- Connect to the N2WS instance over SSH
- You will need to use "sudo" to reach the cert folder. Please keep ownership and permissions of the files ("cp" will do it).
- Go to the folder: /opt/n2wsoftware/cert
- Replace the 2 files in the folder: cpm_server.crt and cpm_server.key , make sure new files have same name
- If you are using MobaXterm you can simple drag/drop files to the SSH session, and then copy to the correct folder
- After replacing, type the command: sudo service apache2 restart
Additional useful info
SSH:
In order to perform the above operations, you need to connect to the instance with SSH (your assigned private key and username: "cpmuser").
If you don't know how, this KB Article which show how to connect to CPM over SSH: How to connect to an instance in AWS using SSH
Linux:
If you are unfamiliar with Linux command, this Ubuntu article explain about various commands: The Linux command line for beginners ,the command need here are mostly: cd, cp, ls, sudo, chmod
To change file ownership to be similar to the original files, see this online article: How to Copy File Permissions and Ownership to Another File in Linux
Certificate: here are some online tools to verify the validity of your certificate:
Related Articles
How to restore/recreate the default server certificate
Important: This procedure should be performed when there are no Backups/DR/Cleanup/S3 Copy running. Only perform this steps if you know how to use SSH and Linux commands If you need to restore/recreate the default server certificate , here are the ...CPM instance hardening for vulnerability scans
In order to perform the below operations, you need to connect to the instance with SSH (your assigned private key and username: "cpmuser"). 1) (Only in v2.3 and up) To enforce usage of TLS 1.2, please edit the file /etc/apache2/mods-enabled/ssl.conf. ...Old versions (pre-v2.1.x) of CPM may fail to communicate with AWS with error "could not get object from aws" and reason "SSL3_GET_SERVER_CERTIFICATE:certificate verify failed"
Old versions (pre-v2.1.x) of CPM may fail to communicate with AWS, logging the following error: Error - (instance: i-12345678) could not get object from aws. Reason: [Errno 1] _ssl.c:503: error:14090086:SSL ...How to change the timezone of a CPM Server
The Timezone for a CPM Server can be changed in three ways 1. Run the timedatectl command on the CPM server (for pre-v2.3.x only) 2. Run the utility attached to this KB (for 2.3.0 and up) 3. If you running CPM 2.7 or greater see the directions at ...How to update the Ubuntu distribution on the CPM instance
In order to update the Ubuntu distribution on the CPM instance, you have to follow these instructions precisely (when no backup/DR is running): 1) Connect with SSH (using the user "cpmuser" and your private key). 2) Type: sudo apt-get update sudo ...