Re-establishing trust with Steward after upgrading to 2048 bit key and SHA256 signature certificates
Prev Tasks to perform after upgrading to 2048 bit key and SHA256 signature certificates Next

Re-establishing trust with Steward after upgrading to 2048 bit key and SHA256 signature certificates

In case of Steward, when you upgrade the cluster to use the enhanced security, the vcsauthserver gets 2048 bit SHA256 certificates and the trust information gets deleted. This breaks the communication between cluster and Steward.

To reinstate the communication, you must setup trust between each node of the upgraded cluster and Steward.

  1. Set up trust on all nodes of the GCO clusters:
    # export EAT_DATA_DIR=/var/VRTSvcs/vcsauth/data/WAC
# vcsat setuptrust -b IP_of_Steward:14149 -s high
  2. Set up trust on the Steward:
    # export EAT_DATA_DIR=/var/VRTSvcs/vcsauth/data/STEWARD
# vcsat setuptrust -b VIP_of_upgraded_cluster:14149 -s high
Prev Up Next
Re-establishing CP server and CP client communication after upgrading to 2048 bit key and SHA256 signature certificates Home Upgrading Steward to 2048 bit key and SHA256 signature certificates