Installing a Custom Security Certificate
The ztC Endurance management server automatically initializes itself with a self-signed SSL certificate, allowing communications to the management server to be encrypted without the identity of the certificate holder being verified by a third party. To view details of this certificate, click the warning icon on the left side of the browser's address bar.
If you prefer to install a custom certificate on the server, run the cert_installer.exe command. You can also use this command to revert to the default certificate or to display the current certificate.
The cert_installer.exe command is located in C:\Program Files\Stratus\bin and must be run as Administrator. The installer requires a key file containing the private key in addition to the certificate file. Both files must have the .pem format.
Command usage:
C:\Program Files\Stratus\bin\cert_installer.exe To Install/recover/display the Certificate: Usage: cert_installer.exe [Option] -d displays current certificate -r recovers to default certificate -c [PATH to certificate.pem] -k [PATH to key.pem], installs the customer certificate -h displays help
cert_installer.exe command automatically restarts the management server after any operation that changes the certificate, so you do not need to perform a manual restart after installation. To install a custom certificate
-
Copy your new, valid certificate and key
.pemfiles fromC:\Program Files\Stratus\binto theAdministratorhome directory on the ztC Endurance system (for example,C:\Users\Administrator\Desktop\joseph). -
Issue the following command from Windows PowerShell to install the certificate:
PS C:\Users\Administrator\Desktop\joseph\cert_installer.exe -c C:\Users\Administrator\Desktop\joseph\cert.pem -k C:\Users\Administrator\Desktop\joseph\key.pem
To revert to the default certificate
PS C:\Users\Administrator\Desktop\joseph\cert_installer.exe -r
To display information about the currently used certificate
PS C:\Users\Administrator\Desktop\joseph\cert_installer.exe -d