Edit

Update TLS certificates with install.sh

After the installation, you can change SSL certificates on all Linux servers with install.sh.

note

New SSL certificates must be located in certificates directory (/opt/wf_installer/certificates). Be sure to run these steps as the runtime user (wf_user in config.yml). You should restart all services after updating.

1. Change user to default user wfuser:

   su - wfuser
   cd /opt/wf_installer/
   

2. Stop all services:

   wfmanager stop all
   

3. Run the Update Certificates Action:

   ./install.sh update_certs <SERVER_ROLE>
   

   This script doesn't affect *.p12 Vault certificates.

4. Start all services:

   wfmanager start all
   

5. Run post-installation checks:

   ./install.sh check <SERVER_ROLE>