> Software > Manage > Maintenance > Deployment > Update the SSL Certificate using the cvCertManager utility

Using guided setup to configure SSL certificate

The Guided Setup consists of two phases.

  • Phase 1 – Generate a private key and Certificate Signing Request (CSR).

  • Phase 2 – Import the signed certificates, configure Tomcat SSL, and restart the Tomcat service.

Important

Both phases must use the same temporary workspace.

Phase 1: Generate a Private Key and CSR

  1. From the main menu, select Guided Setup.

  2. Select Generate Key Pair and CSR.

  3. Accept the default temporary workspace or specify a different location.

    The default workspace is:

    <software_installation_directory>/cvCertManager/temp

  4. Provide the certificate details when prompted.

    • Fully Qualified Domain Name (FQDN)
    • Common Name (CN)
    • Organizational Unit (OU)
    • Organization (O)
    • Locality or City (L)
    • State or Province (ST)
    • Country (C)

  5. The utility generates the following:

    • A private key
    • A Certificate Signing Request (CSR)
    • A properties file containing the certificate configuration

Important

Record the workspace path. You must specify the same workspace when you complete Phase 2.

Phase 2: Import Certificates and Configure Tomcat

Prerequisites for CA-signed certificate

  • Submit the generated CSR to your Certificate Authority (CA).

  • After you receive the signed certificates from the CA, copy the following files into the workspace cacerts directory.

    • Server certificate
    • Intermediate CA certificate(s)
    • Root CA certificate

    For example:

    <software_installation_directory>/cvCertManager/temp/cacerts/

  1. From the Guided Setup menu, select Import CA Certificates and Configure Tomcat.

  2. Verify that you are using the same workspace that was used during Phase 1.

  3. Confirm that the signed certificates have been copied to the cacerts directory.

  4. When prompted, confirm that you want to continue.

    The utility performs the following actions:

    • Imports the CA certificates.

    • Validates the generated keystore.

    • Configures the Tomcat SSL settings.

    • Restarts the Commvault Tomcat service.

  5. After the configuration completes successfully, the utility automatically deletes the temporary workspace.

Note

If importing certificates, configuring Tomcat, or restarting the Tomcat service fails, the temporary workspace is preserved to assist with troubleshooting.

×

Loading...