Kemp Support, how can we help?

The latest application delivery knowledge and expertise at your fingertips.

  1. Kemp Support
  2. Knowledge Base
  3. Security

How to apply the KEMP Self Signed Certificate to both machines in HA without failover

Updated: 

 

Information

 

Summary: There are two machines in an HA (High Availability) Pair.  We can apply the administrative certificate from the WUI (Web User Interface) of the Shared IP and we can set the admin cert for the local machine, but cannot apply it to the standby node without failing over.
Environment:

Product: Loadmaster

Version: Any

Platform: Any

Application: Any
Question/Problem Description:

Would like to apply the Kemp Self-Signed admin cert to the local machine (standby node) in an HA pair without failing over.
Steps to Reproduce:  
Error Message:  
Defect Number:  
Enhancement Number:  
Cause:  
Resolution:
  • Apply the certificate from the shared IP as you would normally from the WUI (Web User Interface). From the shared IP, you are also given the option to apply the admin cert to the local machine.  This will only be applied to the active node.  
  • The SSL Certificate menu option is not available for the local machines when they are configured in HA Mode, it can only be done from the Shared IP's WUI.
  • The RESTful API can be used to accomplish this for each node, including the standby without having to fail over machines. 
  • Use the following API command to apply the admin certificate to the local machine:
  • The API must be enabled in order to run this command

  • To enable the RESTful API interface complete the following steps:

    1. Select the Certificates & Security > Remote Access menu option.
    2. Select the Enable API Interfacecheckbox.
Workaround:  
Notes: The alternative would be to apply the certificate from the Shared IP's Web Interface.  This will only cover the active machine, so to get the standby machine you would have to fail over and make the standby into the active node.

Comments

In this document