このページは、お客様の言語ではご利用いただけません。Huawei Cloudは、より多くの言語バージョンを追加するために懸命に取り組んでいます。ご協力ありがとうございました。
- What's New
- Service Overview
- Getting Started
- User Guide
-
Best Practices
- Using a Custom Script to Implement Consistent Backup for MySQL
- Using a Custom Script to Implement Consistent Backup for SAP HANA
- Using a Custom Script to Implement Consistent Backup for Other Linux Applications
- Troubleshooting a Custom Script Error
- Verifying the Application-Consistent Backup Result (Linux)
- Verifying the Application-Consistent Backup Result (Windows)
- Protecting SQL Server in Failover Cluster Mode
- Protecting SQL Server in Always on Availability Groups Mode
- Change History
- API Reference
-
FAQs
-
About Concepts
- What Is CSBS?
- What Are Full Backup and Incremental Backup?
- What Is Consistent Backup?
- What Are the Differences Between CSBS and VBS?
- What Is a Backup Policy?
- What Are the Differences Between Backup and Disaster Recovery?
- What Are the Differences Between Backup and Snapshot?
- Why Is the Disk Space Usage Displayed in the File System Different from the Backup Size?
-
About Pricing
- How Is CSBS Billed?
- How Do Yearly/Monthly Resource Packages Function When I Have Bought More Than One?
- Are CSBS and VBS Resource Packages Interoperable Between CSBS and VBS?
- Why Am I Charged in Pay-per-use Mode Although I Have Purchased Resource Package?
- What Exactly Are the Function Package and the Storage Package?
- Will the CSBS Backups Displayed on the VBS Page Be Charged Repeatedly?
- How Do I Query CSBS Pay-Per-Use Billing Details?
- Why Is the Fee Deducted After a Backup Is Deleted?
- How Do I Disable CSBS?
- How Do I Stop CSBS from Charging?
-
About Backup
- Does CSBS Support Backing Up All EVS Disks on an ECS?
- Do I Need to Stop the ECS Before Backing It Up?
- Can an ECS with Application Systems Be Backed Up?
- What Are the Minimum Backup Frequency and Maximum Number of Retained Backups Supported by CSBS?
- How Can I Distinguish Automatic Backups From Manual Backups?
- How Can I Configure a Backup Policy?
- Can I Choose to Back Up Only Some Partitions of a Disk?
- Does CSBS Support Cross-Region Backup for ECSs?
- Which Types of Databases Can Be Backed Up Using Database Server Backup?
- How Do I Select Among Database Server Backup, Cloud Server Backup, and Disk Backup?
- How Do I Migrate ECS Data Across Regions Using CSBS?
- Which Time Zone Is the Automatic Backup Time Based On?
- What Can I Do If a Backup Cannot Be Deleted?
- About Restoration
- Others
-
About Concepts
- Troubleshooting
- Videos
- Glossary
-
More Documents
-
User Guide (Paris and Amsterdam Regions)
- Service Overview
- Getting Started
- Management Operations
-
FAQs
- About Concepts
-
About Backup
- Does CSBS Support Backing Up All EVS Disks on an ECS?
- Do I Need to Stop the ECS Before Backing It Up?
- Can an ECS with Application Systems Be Backed Up?
- What Are the Minimum Backup Frequency and Maximum Number of Retained Backups Supported by CSBS?
- How Can I Distinguish Automatic Backups From Manual Backups?
- Does CSBS Support Cross-Region Backup for ECSs?
- About Restoration
- Others
- Troubleshooting Cases
- Change History
- API Reference (Paris and Amsterdam Regions)
-
User Guide (Paris and Amsterdam Regions)
- General Reference
Copied.
Replacing the Server Certificate
For security purposes, users may want to use a Secure Socket Layer (SSL) certificate issued by a third-party certification authority. The Agent allows you to replace authentication certificates and private key files as long as they provide the authentication certificates and private-public key pairs. The update to the certificate can take effect only after the Agent is restarted, hence you are advised to update the certificate in off-peak hours.
Prerequisites
- You have obtained a username and its password for logging in to the management console.
- The username and password for logging in to a server have been obtained.
- New certificates in the X.509v3 format have been obtained.
Context
- The client is pre-deployed with the Agent AC certificate bcmagentca, private key file of the CA certificate server.key (The default protection password of this file is BCM@DataProtect123), and authentication certificate server.crt. All these files are saved in /home/rdadmin/Agent/bin/nginx/conf (if you use Linux) or \bin\nginx\conf (if you use Windows).
- You need to restart the Agent after replacing a certificate to make the certificate effective.
Procedure (Linux)
- Log in the Linux server with the Agent installed.
- Run the TMOUT=0 command to prevent PuTTY from exiting due to session timeout.
NOTE:
After the preceding command is executed, the system remains running even when no operation is performed, which results in security risks. For security purposes, run the exit command to exit the system after you finish performing operations.
- Run the su - rdadmin command to switch to user rdadmin.
- Run the cd /home/rdadmin/Agent/bin command to go to the script save path.
NOTE:
The installation path of the Agent is /home/rdadmin/Agent.
- Run the sh agent_stop.sh command to stop the Agent running.
- Place the new certificates and private key files in the specified directory.
NOTE:
Place new certificates in the /home/rdadmin/Agent/bin/nginx/conf directory.
- Run the /home/rdadmin/Agent/bin/agentcli chgkey command.
Information similar to the following information is displayed:
Enter password of admin:
NOTE:admin is the username configured during the Agent installation.
- Type the login password of the Agent and press Enter.
Information similar to the following information is displayed:
Change certificate file name:
- Enter a name for the new certificate and press Enter.
NOTE:
If the private key and the certificate are the same file, names of the private key and the certificate are identical.
Information similar to the following information is displayed:
Change certificate key file name:
- Enter a name for the new private key file and press Enter.
Information similar to the following information is displayed:
Enter new password: Enter the new password again:
- Enter the protection password of the private key file twice. The certificate is then successfully replaced.
- Run the sh agent_start.sh command to start the Agent.
Procedure (Windows)
- Log in the Windows server with the Agent installed.
- Open the CLI and go to the installation path\bin directory.
- Run the agent_stop.bat command to stop the Agent running.
- Place the new certificates and private key files in the specified directory.
NOTE:
Place new certificates in the installation path\bin\nginx\conf directory.
- Run the agentcli.exe chgkey command.
Information similar to the following information is displayed:
Enter password of admin:
NOTE:admin is the username configured during the Agent installation.
- Enter a name for the new certificate and press Enter.
NOTE:
If the private key and the certificate are the same file, names of the private key and the certificate are identical.
Information similar to the following information is displayed:Change certificate key file name:
- Enter a name for the new private key file and press Enter.
Information similar to the following information is displayed:
Enter new password: Enter the new password again:
- Enter the protection password of the private key file twice. The certificate is then successfully replaced.
- Run the agent_start.bat command to start the Agent.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot