OD upgrading and SSL

My customer currently has a bunch (lets say 30) OD 5.6 receivers, and one OD 5.6 base server sitting on host-A.

We're in the process of installing a brand new server (host-B w/TS and OD) with OD 6.2.1.

So far this should be pretty much a walk in the park.

However - the customer uses SSL certificates and such in their deployments (server and deployment configuration files) - and I haven't done anything with SSL in a loooong time - so my questions are:

My guess is that I need to do the new certificates for the base server - I'm less sure about the certificates for the receivers.

Find more posts tagged with

Comments

TroyP

What OS are your OD base and receiver servers running on? Are your certs self signed or signed by a CA?

Adam Stoller

What OS are your OD base and receiver servers running on? Are your certs self signed or signed by a CA?

The original Base server was Windows 2000
The new Base server is Windows 2003
I believe (haven't gotten that far yet) that the Receivers tend to be W2K3
I don't know if the certs are self-signed or signed by a CA (I had nothing to do with them) - is there a way to tell (without trying to find the person who did it originally, who may no longer be with the company)?

TroyP

The original Base server was Windows 2000
The new Base server is Windows 2003 I believe (haven't gotten that far yet) that the Receivers tend to be W2K3 I don't know if the certs are self-signed or signed by a CA (I had nothing to do with them) - is there a way to tell (without trying to find the person who did it originally, who may no longer be with the company)?

To set the CA you can copy the crt file from server and if you open in windows you should see the same dialog as you get when you click the padlock on a secured page in IE.

I haven't done exactly what you want to do on windows My experience matches the statements that are on the page whose URL is below.

You are actually upgrading your OS so I don't know that what means for copying the cert. I have always heard you have to keep the same OS to copy a cert but I am not sure if Win 2K to Win 2003 is "same" enough.

We just have completed a data center migration were all of our SSL certs were moved to new hardware but exact same OS application versions without a problems (Windows, Solaris, Linux).

Like the page below says I think that you technically need a cert for every server according to the CA's license.

http://www.sslshopper.com/how-to-move-or-copy-an-ssl-certificate-from-one-server-to-another.html

I think I have a concrete answer to your question about the OD recievers but I have to check my documentation when I get to the office.

Adam Stoller

Troy (et al),

Thanks for the information - it turns out to be a non-issue because my customer today informed me that we didn't have to bother with SSL - so I'll simply be removing it from the configuration files (odbase.xml, odrcvr.xml, and deployments).

However, I'm going to leave this thread open in case anyone else wants to input information that might be useful to someone else facing this scenario down the road.

CRB

i have done some SSL deployments a month ago, it was simple process if you follow the admin guide step by step. i had to generate the certs for each host-target pair... i concluded (based on logic, i might be wrong) that you dont need to regenerate the certs if you are on the same machine and just upgrading the OS, but you will have to do it if you move either the base or the target to different host.