Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

SBCE 8.1.3 EMS with HA Pair

Status
Not open for further replies.

dignoffo

IS-IT--Management
Apr 22, 2009
198
US
I have a certificate expiring next month on our SBCE 8.1.1 with an EMS HA pair configuration. We have generated the CSR and installed the new cert on the client and server profiles. I have been instructed I need to restart the application on each HA pair to have the certificate applied. Is this correct or is there another procedure?
 
Typically a server will not use new certs until certain services are restarted. So, yes, it's true.
 
Wanebo,

Will restarting the application for each HA pair work?

 
It's usually best to just reboot the servers so all the application services do a full clean restart.

Start by rebooting the member of the HA pair that is in standby, after that comes back up and is functioning properly, interchange the pair so the one you just rebooted becomes active, then reboot the other one (which is now the standby).
 
As SBCe's are nginx based, I've gotten away with simply doing a reload nginx config without the need to restart any services. New SSL sessions establish using the new certs. Look up nginx -s reload
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top