UCS 4: Update SSL Certificates to work with UCS 5

[roland.gsell]

Hi,
there are guides on how to renew the UCS certificates, but for my use case there’s one piece of information missing:

I would like to recreate the certificates on UCS 4 so that they are working on UCS 5 as well, since there’s a better algorithm needed for it.
How is this done correctly?

Cheers,
Roland.

[roland.gsell]

Hi again,
I guess I was wrong about missing information.

In this guide:

Renewing the SSL certificates

Communication between the different systems in a UCS domain is largely SSL encrypted. A root certificate and host certificate for each computer are required for the SSL encryption. The root certificate is only valid for a specified period of time, as are the host certificates created with the root certificate. Once this period of time elapses, services which encrypt their communication with SSL (e.g., LDAP) no longer function. It is thus essential to verify the validity of the certificates and c…

one gets instructed to generate a new certificate with sha256, which is good enough for UCS 5 as far as I know.

Cheers,
Roland.