Kemp Support, how can we help?

The latest application delivery knowledge and expertise at your fingertips.

How to apply the administrative cert to both machines in HA without failover




Summary: There are two machines in an HA (High Availability) Pair.  We can apply the administrative certificate from the WUI (Web User Interface) of the Shared IP and we can set the admin cert for the local machine, but cannot apply it to the standby node without failing over.

Product: LoadMaster




Question/Problem Description:

Would like to apply the admin cert to the local machine (standby node) in an HA pair without failing over.

Steps to Reproduce:  
Error Message:  
Defect Number:  
Enhancement Number:  
  • Apply the certificate from the shared IP as you would normally from the WUI (Web User Interface).  From the shared IP, you are also given the option to apply the admin cert to the local machine.  This will only be applied it to the active node.  
  • The SSL Certificate menu option is not available for the local machines when they are configured in HA Mode, it can only be done from the Shared IP's WUI.
  • The RESTful API can be used to accomplish this for each node, including the standby without having to fail over machines. 
  • Use the following API command to apply the admin certificate to the local machine:
  • The API must be enabled in order to run this command
  • To enable the RESTful API interface complete the following steps:

    1. Select the Certificates & Security > Remote Access menu option.
    2. Select the Enable API Interface checkbox.
Notes: The alternative would be to apply the certificate from the Shared IP's Web Interface.  This will only cover the active machine, so to get the standby machine you would have to fail over and make the standby into the active node.

Was this article helpful?
0 out of 1 found this helpful



Kevin Benedict

Some guidance on what commands to use from Windows Powershell would be highly useful here for people in a Windows-only environment.



Dave Brennan

For PowerShell, you should be able to do so using the commands listed here: