Installing or Updating SSL Certificate
Last updated
Last updated
A new ExaVault installation includes a self-signed certificate. Most client programs do not trust self-signed certificates, and you will likely encounter warnings or errors, depending on the program.
We recommend replacing the default certificate with your own SSL certificate.
By upgrading to a plan, you can enable .
Customers are able to manage and update their site's SSL Certificate with the ExaVault Appliance Manager.
The SSL Certificate you provide must be in PEM format as a single file without a password. That file needs to contain all of the following components, in order:
Certificate
Intermediate/Certificate Authority Certificate(s)
Private Key
Terminal may be used to generate a single PEM file containing all three components of the SSL certificate with the following command:
cat [certificate file] [bundle file] [private key/PEM file] > [combined_certificate.pem]
To create a PEM file with Windows, create a new file with Notepad and save the file as a .pem extension.
Copy the contents of each file into the Notepad file in the following order:
Certificate
Intermediate/Certificate Authority Certificate(s)
Private Key
The SSL Certificate will be installed within your ExaVault Appliance Manager, which can be accessed by navigating to https:// [APPLIANCE_IP-OR-HOSTNAME]:9002
Once accessed, login, and navigate to HTTP SSL.
Select Choose File under Domain Cert to select the PEM file for upload. After selecting the file, click Add Domain Cert.
ExaVault does not support multiple domain names with Subject Alternative Name (SAN) SSL certificates. While you can upload a SAN certificate to the system, the web interface is only compatible with a single domain and will not function correctly with multiple domains specified in a SAN certificate.
Take these steps to minimize the disruption of changing your installation's domain name.
Determine the date that you will perform the domain switchover. Plan the switch for a time with the lowest amount of traffic, likely over a weekend.
Communicate with all of your users in advance. Inform users of the upcoming domain change, providing them with the new URL and updating any relevant bookmarks or login credentials. Some users may require multiple notifications of the impending change through multiple ways, such as through email and phone calls.
Configure the new domain’s DNS settings, ensuring that the new records point to your ExaVault instance. Allow plenty time for DNS propagation, such as 24 hours.
Obtain your new SSL certificate. Generate a new SSL certificate for the new domain and ensure it is properly validated.
Update the configuration in the ExaVault Appliance Manager, which can be accessed by navigating to https:// [APPLIANCE_IP-OR-HOSTNAME]:9002. You will need to change the domain name in the configuration page as well as install the certificate, and then restart the appliance.
After restarting, test that you are able to access the appliance using the new domain name.
Follow up with your users again to confirm that the change is in place. Keep an eye on user access logs and feedback to ensure a smooth transition.
After modifying the SSL Certificate, a .