v11 - Replace Self-Signed Certificate

[Anonymous]

Does anyone know if there are any instructions for replacing the self-signed certificate when accessing the admin server on v11.

The only document I found was relating to v9.8, is that still valid?

[NaushadKasu1]

Jeremy,

Look at my comment in this thread:

https://community.rsa.com/message/925212?commentID=925212&et=watches.email.thread#comment-925212

Sent from my iPhone

[Anonymous]

There is documentation at the end of the Security Configuration guide available here (in Appendix A): Security Configuration Guide for Version 11.2 

From the field – it does work:

We have created a self-signed certificate and a key  using  the below,

openssl req  -nodes -new -x509  -keyout server.key -out server.cert

then updated /etc/nginx/conf.d/nginx.conf with the new key and pem in lines:

ssl_certificate      /etc/pki/nw/web/web-server-cert.pem;

ssl_certificate_key  /etc/pki/nw/web/web-server-key.pem;

then restarted the nginx.

UI has started with the new cert

[Anonymous]

Thank for confirming Chris.  Yes, this info is within the Security Guide: https://community.rsa.com/docs/DOC-96728