Use the cvCertManager utility to configure or update the SSL certificate using the following two setup paths:
-
Guided Setup: Generate a private key and Certificate Signing Request (CSR), import CA-signed certificates, and configure Tomcat.
-
Existing Certificates Setup: Configure Tomcat by using an existing keystore (
.pfx,.p12, or.jks).
Note
You must run the cvCertManager utility procedure on every server that hosts the Commvault Tomcat service.
Before You Begin
-
Log on to the server by using an account with Administrator (Windows) or root (Linux) privileges.
-
Ensure that the required certificate files are available.
-
If you are using Existing Certificates Setup, have the keystore file and its password available.
Start the cvCertManager Utility
-
Open a command prompt or terminal.
-
Navigate to the Commvault Base directory.
Operating System Command Linux cd </commvault/Base>Windows cd </commvault/Base> -
Start the utility.
-
Linux
./cvCertManager.sh -
Windows
cvCertManager.cmd
-
-
From the main menu, select one of the following options:
Option Description Guided Setup Generate a CSR, import the signed certificate, and configure Tomcat.
For instructions, see Using guided setup to configure SSL certificateExisting Certificates Setup Configure Tomcat by using an existing keystore.
For instructions, see Configure Tomcat using an existing keystore