No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

WLAN Product Interoperation Configuration Guide

Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Server Certificate Importing Tool

Server Certificate Importing Tool

The server certificate importing tool is used to replace the default authentication certificate of the Tomcat server and portal server. The Tomcat server or portal server certificate is used for establishing a reliable communication channel between the Tomcat server and Web browser. To enable the server to support the Internet Explorer 6 that is used on Windows XP operating system, the SHA1 encryption mode is used for certificate signature by default. If the browser versions with later than the Internet Explorer 6 are used, the SHA256 encryption mode is recommended, which is more secure.

Prerequisites

The Service Manager and Service Controller have been installed.

Context

  • If the Service Manager and Service Controller are installed on the same hardware server, both Tomcat server certificate and Portal server certificate are replaced after you run the server certificate importing tool.
  • If the Service Manager and Service Controller are installed on different hardware servers, run the server certificate importing tool on the server where the Service Manager is installed to replace the Tomcat server certificate, and run the tool on the server where the Service Controller is installed to replace the Portal server certificate.

Procedure

  1. Log in to the server where the Service Manager or Service Controller is installed.

    • Windows

      Log in to the server using an administrator account.

    • Linux

      Log in to the server using a root account.

  2. Start the server certificate importing tool.

    • Windows

      Access the installation directory of the Agile Controller-Campus, which is D:\Agile Controller by default. Change the installation directory according to the actual situation. Double-click Upload Certificate.bat to start the certificate importing tool.

    • Linux
      1. Run the chmod /opt/755 **.jks command to add read and write permissions to certificate files, so that the certificate importing tool can normally obtain certificate files. In this command, opt specifies the directory for saving a certificate file and 755 **.jks specifies the certificate name. You need to replace them with the actual directory and file name respectively.
      2. Run the su - controller command to switch to the controller user.
      3. Run the cd /opt/AgileController command to access the installation directory of the Agile Controller-Campus. /opt/AgileController is the default installation directory of the Agile Controller-Campus. Change the installation directory according to the actual situation.
      4. Run the ll command to check whether the Upload Certificate.sh file exists in the installation directory of the Agile Controller-Campus.

        If so, continue to perform the following steps. If not, check whether the installation directory of the Agile Controller-Campus is correct.

      5. Run the sh Upload Certificate.sh command to start the certificate importing tool.

  3. Click Backup. Select a path for storing the default server certificates and then click Open.

  4. After the certificates are backed up successfully, click OK.

  5. Click Browse. Select the path for storing the certificate and enter the Certificate Password.
  6. Click Upload to replace the default server certificate.
  7. Restart the Service Manager and Service Controller services after successful upload to make new certificates take effect.

    NOTE:

    After a Portal server certificate is uploaded, you can only access the Portal server by the domain name using the HTTPS protocol, and the domain name must be the same as that used during server certificate application.

Rollback Operation

If the default certificate of a server is replaced, perform the following operations to revert back to the default one:

  1. Click Browse. Select the path for storing the default certificate of the server to be reverted back. and then enter the Certificate Password.
  2. Click Upload to revert back to the default server certificate.
  3. Restart the Service Manager and Service Controller services after successful upload to make the default certificate take effect.
Translation
Download
Updated: 2019-03-30

Document ID: EDOC1000113779

Views: 51160

Downloads: 1691

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next