Edit

Updating TLS certificates with install.sh

After the installation, you can change SSL certificates on all Linux servers with install.sh.

New SSL certificates must be located in the certificates directory: /opt/wf_installer/certificates Be sure to run these steps as the runtime user (wf_user in config.yml). You should restart all services after updating.

1. Change a user to default user: wfuser

   su - wfuser
   cd /opt/wf_installer/
   

2. Stop all services.

   wfmanager stop all
   

3. Run the Update Certificates Action.

   ./install.sh update_certs <SERVER_ROLE>
   

   The script doesn't affect *.p12 Vault certificates.

4. Start all services.

   wfmanager start all
   

5. Run post-installation checks.

   ./install.sh check <SERVER_ROLE>