Installing or Updating SSL Certificate

Customers are able to manage and update their site's SSL Certificate with the ExaVault Appliance Manager.

The SSL Certificate you provide must be in PEM format as a single file without a password. That file needs to contain all of the following components, in order:

• Certificate

• Intermediate/Certificate Authority Certificate(s)

• Private Key

Creating A Combined PEM File on Mac/Linux

Terminal may be used to generate a single PEM file containing all three components of the SSL certificate with the following command:

cat [certificate file] [bundle file] [private key/PEM file] > [combined_certificate.pem]

Creating a Combined PEM File on Windows

To create a PEM file with Windows, create a new file with Notepad and save the file as a .pem extension.

Copy the contents of each file into the Notepad file in the following order:

• Certificate

• Intermediate/Certificate Authority Certificate(s)

• Private Key

Installation

The SSL Certificate will be installed within your ExaVault Appliance Manager, which can be accessed by navigating to https:// [APPLIANCE_IP-OR-HOSTNAME]:9002

Once accessed, login, and navigate to HTTP SSL.

Select Choose File under Domain Cert to select the PEM file for upload. After selecting the file, click Add Domain Cert.

After modifying the SSL Certificate, a restart of the appliance is required.

SAN Certificates & Changing Domain Names

ExaVault does not support multiple domain names with Subject Alternative Name (SAN) SSL certificates. While you can upload a SAN certificate to the system, the web interface is only compatible with a single domain and will not function correctly with multiple domains specified in a SAN certificate.

Planning for Domain Changes

Take these steps to minimize the disruption of changing your installation's domain name.

Determine the date that you will perform the domain switchover. Plan the switch for a time with the lowest amount of traffic, likely over a weekend.

Communicate with all of your users in advance. Inform users of the upcoming domain change, providing them with the new URL and updating any relevant bookmarks or login credentials. Some users may require multiple notifications of the impending change through multiple ways, such as through email and phone calls.

Configure the new domain’s DNS settings, ensuring that the new records point to your ExaVault instance. Allow plenty time for DNS propagation, such as 24 hours.

Obtain your new SSL certificate. Generate a new SSL certificate for the new domain and ensure it is properly validated.

Update the configuration in the ExaVault Appliance Manager, which can be accessed by navigating to https:// [APPLIANCE_IP-OR-HOSTNAME]:9002. You will need to change the domain name in the configuration page as well as install the certificate, and then restart the appliance.

After restarting, test that you are able to access the appliance using the new domain name.

Follow up with your users again to confirm that the change is in place. Keep an eye on user access logs and feedback to ensure a smooth transition.