Dell PowerFlex Rack with PowerFlex 3.x Administration Guide

Restore the appliance SSL and trusted certificates

1. Restore the appliance SSL certificates:
   1. Log in to the PowerFlex Manager appliance using SSH and sudo to root: sudo su -
   2. Copy the .crt and .key file from the jumphost or file location to the new PowerFlex Manager appliance in /home/delladmin or /tmp/.
   3. To adjust the permissions to the original state or to check the permissions, type:
      chown root:root /path/to/files/localhost.*
      chmod 755 /path/to/files/localhost.crt
      chmod 400 /path/to/files/localhost.key
   4. To copy the files to their default location type:
      cp /path/to/files/localhost.crt /etc/pki/tls/certs/
      cp /path/to/files/localhost.key /etc/pki/tls/private/
   5. Restart the PowerFlex Manager appliance.
   6. After the restart, check that the certificate is appearing correctly in the browser and in PowerFlex Manager under Settings > Virtual Appliance Management > Appliance SSL Certificate.
2. Restore the appliance SSL trusted certificates:
   1. Copy the cacerts file to the newly deployed or upgraded PowerFlex Manager appliance where you would like them restored, type keytool -list -keystore /etc/pki/ca-trust/extracted/java/cacerts -storepass "changeit" to list the contents.
   2. Type keytool -list -keystore <location_of_copied_certs> -storepass "changeit" |grep -i pfxm to verify the PowerFlex Manager certificate is present.
   3. Type keytool -exportcert -rfc -keystore <location_of_copied_certs> -alias <name_of_cert> -storepass changeit -file <filename_for_cert> to export certificates from the cacerts backup database.
   4. From the directory you ran the commands from, copy the filename for the certificate to your jump server or a different destination using WinSCP.
   5. To upload the file to SSL Trusted Certificates, click Edit from the SSL Trusted Certificates section.
   6. Browse to the file that was uploaded and click Save.