Welcome Serena Central users! CLICK HERE
The migration of the Serena Central community is currently underway. Be sure to read THIS MESSAGE to get your new login set up to access your account.
Highlighted
jfeyen Trusted Contributor.
Trusted Contributor.
1802 views

Does a CA change has impact on Kanaka

Hi,

As we are going to install a new OES2015 server. This server will be promoted to be the new CA server.

Will the Kanaka clients (macs) or the kanaka servers stop working if the CA is changed?

I ask this because the server.pem file is based on the old CA.
https://www.novell.com/support/kb/doc.php?id=7012010

Kr,

Joeri
Labels (1)
Tags (3)
0 Likes
3 Replies
Anonymous_User Absent Member.
Absent Member.

Re: Does a CA change has impact on Kanaka

On 11/30/2015 11:16 AM, jfeyen wrote:
>
> Hi,
>
> As we are going to install a new OES2015 server. This server will be
> promoted to be the new CA server.
>
> Will the Kanaka clients (macs) or the kanaka servers stop working if the
> CA is changed?
>
> I ask this because the server.pem file is based on the old CA.
> https://www.novell.com/support/kb/doc.php?id=7012010
>
> Kr,
>
> Joeri
>
>


Joeri,

Assuming this is Kanaka 2.8: The Kanaka clients and Engine will continue
to work if you change out your certificate, until the CA is updated in
your Macs' keychain or the existing certificate expires. (The security
certificate held by the Engine is not validated against the tree's CA
each time a client logs in.) To avoid that happening at an inopportune
time, however, we would recommend updating your certificates and the CA
in your Macs' keychain. That means you'd need to generate a new
certificate for Kanaka and re-import it on each of your Macs, as if
doing a new 2.8 install.

--

-- NFMS Support Team
0 Likes
jfeyen Trusted Contributor.
Trusted Contributor.

Re: Does a CA change has impact on Kanaka

NFMS Support Team;2412456 wrote:
On 11/30/2015 11:16 AM, jfeyen wrote:
>
> Hi,
>
> As we are going to install a new OES2015 server. This server will be
> promoted to be the new CA server.
>
> Will the Kanaka clients (macs) or the kanaka servers stop working if the
> CA is changed?
>
> I ask this because the server.pem file is based on the old CA.
> https://www.novell.com/support/kb/doc.php?id=7012010
>
> Kr,
>
> Joeri
>
>


Joeri,

Assuming this is Kanaka 2.8: The Kanaka clients and Engine will continue
to work if you change out your certificate, until the CA is updated in
your Macs' keychain or the existing certificate expires. (The security
certificate held by the Engine is not validated against the tree's CA
each time a client logs in.) To avoid that happening at an inopportune
time, however, we would recommend updating your certificates and the CA
in your Macs' keychain. That means you'd need to generate a new
certificate for Kanaka and re-import it on each of your Macs, as if
doing a new 2.8 install.

--

-- NFMS Support Team


Hi NFMS Team,

Thanks for those answers.
This means my servers will not be impacted after the migration. In 2 months my kanaka servers will be replaced with new certificates based on the new CA.

Kr,

Joeri
0 Likes
jfeyen Trusted Contributor.
Trusted Contributor.

Re: Does a CA change has impact on Kanaka

Hi,

As I installed a new CA and my CA certificates were almost expiring.

I created new certificates and installed them on my Kanaka servers and replaced the certificates on my Macs.
Followed the way you said:
That means you'd need to generate a new
certificate for Kanaka and re-import it on each of your Macs, as if
doing a new 2.8 install.

https://www.novell.com/support/kb/doc.php?id=7012010

Kr,

Joeri
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.