REGENERATE EEM CERTIFICATES FOR AUTOSYS
$autosys_secure
CA WAAE Security Utility
Please select from the following options:
[1] Revert to NATIVE instance security.
[2] Manage CA EEM security settings.
[3] Change database password.
[4] Change remote authentication method.
[5] Manage user@host or user@domain users.
[6] Get encrypted password.
[0] Exit CA WAAE Security Utility.
> 2
Manage CA EEM security settings
Please select from the following options:
[1] Manage CA EEM server settings.
[2] Manage cached credentials.
[9] Exit from "Manage CA EEM security settings" menu.
[0] Exit CA WAAE Security Utility.
> 1
Manage CA EEM server settings
Please select from the following options:
[1] Show current CA EEM server settings.
[2] Set CA EEM server location and regenerate certificate.
[3] Set unauthenticated user mode.
[9] Exit from "Manage CA EEM server settings" menu.
[0] Exit CA WAAE Security Utility.
> 2
Input the CA EEM server name(s) (or hit enter to cancel): (The EEM server hostname(s))
Input the CA EEM administrator name (or hit enter to cancel): EiamAdmin
Input the CA EEM administrator password: (the password will be hidden while you type)
Confirm the CA EEM administrator password: (the password will be hidden while you type)
Note: Specify all EEM cluster nodes as comma separated values, in case of EEM Multi-Write configuration(eemserver1,eemserver2).
CAUAJM_I_60200 CA EEM certificate generated successfully.
CAUAJM_W_60190 The CA EEM server location remains unchanged.
Please select from the following options:
[1] Show current CA EEM server settings.
[2] Set CA EEM server location and regenerate certificate.
[3] Set unauthenticated user mode.
[9] Exit from "Manage CA EEM server settings" menu.
[0] Exit CA WAAE Security Utility.
>0
REGENERATE EEM CERTIFICATES FOR WCC
Navigate to $CA_WCC_INSTALL_LOCATION/safex directory.
Rename/move the wcc.pem and wcc.key files if exist.
The following command will generate the new wcc.pem and wcc.key files:
./safex –h eem_hostname(s) –u EiamAdmin –p password –f IssueCertificate.xml
Note: Specify all EEM cluster nodes as comma separated values, in case of EEM Multi-Write configuration(eemserver1,eemserver2).
The password (-p) is for EiamAdmin.
For example:
#./safex –h eem_server_hostname(s) –u EiamAdmin –p <EiamAdmin_user_password> –f IssueCertificate.xml
Setting Translation file:./safex.tr
Setting back end to "localhost"
Setting locale to "en_us"
OK:Successfully Authenticated
OK: action[Attach] with ApplicationInstance label[WCC0004]
OK: action[IssueCertificate] for ApplicationInstance label[WCC0004] user[]
OK: action[Detach] from ApplicationInstance label[WCC0004]
OK:Total objects Added 0
OK:Total objects Modified 0
OK:Total objects Removed 0
OK:Total objects Skipped 0
OK:Total objects Exported 0
Navigate to the directory $CA_WCC_INSTALL_LOCATION/data/config
Rename/move the existing wcc.pem and wcc.key certificates.
Move the newly generated certificate wcc.pem and the key wcc.key files from $CA_WCC_INSTALL_LOCATION/safex to the current location ($CA_WCC_INSTALL_LOCATION/data/config)
Set the file ownership permissions to same as the previous files.
Register the CA WCC to use newly certificates
# ./wcc_config.sh -u ejmcommander -p ejmcommander --eemhostname eem_hostname(s) --eemappid WCC0004 --eemcertname wcc.pem --eemcertkey wcc.key -eemadmin EiamAdmin --eempassword EiamAdmin_user_password
Logging in as 'ejmcommander' - SUCCESS
EEM server has been changed successfully.
- FINISHED
The changes will be applied only after restart.
Execute the following command to restart the services.
-----------------------------------------------------------------------
unisrvcntr restart CA-wcc-services
-----------------------------------------------------------------------
As indicated in the command output, Restart the WCC services using the command 'unisrvcntr restart CA-wcc-services'