Welcome Serena Central users! CLICK HERE
The migration of the Serena Central community is currently underway. Be sure to read THIS MESSAGE to get your new login set up to access your account.
Anonymous_User Absent Member.
Absent Member.
1622 views

backup certificates

I've been browsing the newsgroups and there are a lot of questions about
certs.

I've tried to backup the certs, zman betf.. etc

I cant figured out the format these files are exported as ..

At this stage I would like to insert them into Internet explorer which I
have not been successful

And probably most impirtantly for backup purposes in case I need to
reinstall.
Labels (2)
0 Likes
5 Replies
AndrewMallett Absent Member.
Absent Member.

Re: backup certificates

Certificates are stored in:

C:\Program Files\Novell\ZENworks\conf\security on windows
/opt/Novell\ZENworks\conf\security on Linux

So for backup you can use a copy or file-system backup

As far as zman: betf is for bundles ( bundle export to file )

zman cae
and zman cai may be more useful commands. These are used to change
certificate authority roles in the zone . If you lose the machine that
manages the certificates you can take them another server and enable the
certificate server role on that server

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: backup certificates

Andrew Mallett wrote:
> Certificates are stored in:
>
> C:\Program Files\Novell\ZENworks\conf\security on windows
> /opt/Novell\ZENworks\conf\security on Linux
>
> So for backup you can use a copy or file-system backup
>
> As far as zman: betf is for bundles ( bundle export to file )
>
> zman cae
> and zman cai may be more useful commands. These are used to change
> certificate authority roles in the zone . If you lose the machine that
> manages the certificates you can take them another server and enable the
> certificate server role on that server



So the certificates stored in here are complete backup capable. Thats cool.


we don't have a secondary server which some sites are utilising. I can
see the benefits even with the advice you provided me with today.
However as I don;t have a second server the certs in that folder can
build up an identical box.

Are the certs for connectivity between clients and server... and also
server and external database on sql 2005 ?

0 Likes
AndrewMallett Absent Member.
Absent Member.

Re: backup certificates

The CA cert is used by all clients. AFAIK the certs are not used to SQL
as it is just standard 1433 db traffic rather thank https. Having a
backup of the certs is a good idea if you are using internal CA. You can
rebuild ZCM and use the old certs.

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: backup certificates

Andrew Mallett wrote:
> The CA cert is used by all clients. AFAIK the certs are not used to SQL
> as it is just standard 1433 db traffic rather thank https. Having a
> backup of the certs is a good idea if you are using internal CA. You can
> rebuild ZCM and use the old certs.





A little of the subject, however someting else thats driving me crazy.
As they are within the /opt/Novell\ZENworks\conf\security directory, can
they be inserted into Internet explorer so administrators can login
without extra and clicks that are not necessary ?
0 Likes
AndrewMallett Absent Member.
Absent Member.

Re: backup certificates

the ca.der is the file you want

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.