Skip to main content
OnCommand Workflow Automation 5.1

Replace the default Workflow Automation SSL certificate

Contributors netapp-aoife
PDFs

You can replace the default Workflow Automation (WFA) SSL certificate if the certificate has expired or if you want to increase the validity period of the certificate.

You must have Windows admin privileges on the WFA server.

The default WFA installation path is used in this procedure. If you changed the default location during installation, you must use the custom WFA installation path.

Steps

  1. Log in as the admin user on the WFA host machine.

  2. Use the Windows Services console to stop the following WFA services:

    • NetApp WFA Database

    • NetApp WFA Server

  3. Delete the wfa.keystore file from the following location:

    <WFA_install_location>\WFA\jboss\standalone\configuration\keystore

  4. Open a command prompt on the WFA server, and change directories to the following location:<OpenJDK_install_location>\bin

  5. Obtain the database key:

    keytool -keysize 2048 -genkey -alias "ssl keystore" -keyalg RSA -keystore "<WFA_install_location>\WFA\jboss\standalone\configuration\keystore\wfa.keystore" -validity xxxx

    xxxx is the number of days for the new certificate's validity.

  6. When prompted, provide the password (default or new).

    The default password is a randomly generated encrypted password.

    To obtain and decrypt the default password, follow the steps in the Knowledge Base article How to renew the self-signed certificate on WFA 5.1.1.0.4

    To use a new password, follow the steps in the Knowledge Base article How to update a new password for the keystore in WFA.

  7. Enter the required details for the certificate.

  8. Review the displayed information, and enter Yes.

  9. Press Enter when prompted by the following message: Enter key password for <SSL keystore> <RETURN if same as keystore password>.

  10. Restart the WFA services by using the Windows Services console.