Moving An Es From One Ms To Another - Extreme Networks Sentriant AG Software User's Manual

System Administration
3 Submit the CSR (see
along with anything else they might require:
http://www.verisign.com/
http://www.thawte.com/
4 If you are using a non-traditional CA (such as your own private Certificate Authority/Public Key
Infrastructure (CA/PKI), or if you are using a less well-known CA, you will need to import the CA's
root certificates into the java cacerts file by entering the following command on the command line of
the Sentriant AG server:
importCert -t
Where:
<CA_alias> is an alias unique to your cacerts file and preferably identifies the CA to which it
pertains
<ca_root_cert_file> is the file containing the CA's root certificate
If you are on a combo box, you must enter either
server), along with
5 Once you get your signed certificate back from the CA, import it into your keystore (see
Files" on page
following command on the command line of the Sentriant AG server:
importCert web_cert
Where:
<signed_cert_file> is the name of the file containing your CA-signed certificate
If you are on a combo box, you must enter either -e (for enforcement server) or -m (for management
server) to specify whether the certificate will be used for an ES or MS..

Moving an ES from One MS to Another

If you have an existing ES, you can move it to a different MS by performing the steps in this section.
To move an ES to a different MS:
Command line window
1 Log in to the ES as
2 Enter the following command at the command line:
350
"Copying Files" on page
<CA_alias> <ca_root_cert_file>
, to specify whether the certificate will be used for an ES or MS.
-t
34), replacing the previously self-signed public certificate for your key by entering the
<signed_cert_file>
using SSH or directly with a keyboard.
root
34) to your chosen CA (such as Thawte or Verisign)
(for enforcement server) or
-e
Sentriant AG Software Users Guide, Version 5.3
(for management
-m
"Copying