User Guide

13 Updating encryption certificates 75
7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, [e-mail],
www.7signal.com
7signal Sapphire Deployment Guide Release 5.0
13 UPDATING ENCRYPTION CERTIFICATES
Sometimes it is necessary to update encryption certificates used throughout Sapphire solution. Certificates
can be updated from certificate package file in Linux, separate truststore file and truststore password are
needed in Windows (see certificates CD/DVD).
13.1 Updating Carat server certificates
Step 1: Login to Carat server host as root user
Step 2: Use 7carat tool to update certificate
# 7carat certificate set /path_to_package/mycerts-7signal-all.tar.gz
Validating archive file..........................................OK
Updating Carat server certificates.................................
Found Carat configuration from /opt/7signal/Carat/7signal/conf...OK
Extracting carat keystore files..................................OK
Extracting 7signal keystore......................................OK
Extracting Eye certificate.......................................OK
Extracting Eye certificate password..............................OK
Extracting carat keystore password...............................OK
Extracting 7signal keystore password.............................OK
Updating server configuration file...............................OK
Updating setup configuration file................................OK
13.2 Updating Analyzer server certificates
Step 1: Login to Analyzer server host as root user
Step 2: Use 7analyzer tool to update certificates
# 7analyzer certificate set /path_to_package/mycerts-7signal-all.tar.gz
Validating archive file..........................................OK
Updating Analyzer certificates.....................................
Found /opt/7signal/Analyzer/webapps/WEB-INF/web.xml..............OK
Found /opt/7signal/Analyzer/apache-tomcat-5.5.26/conf/server.xml.OK
Found /opt/7signal/Analyzer/start_loupe_server.sh................OK
Found current truststore file....................................OK
Extracting 7signal truststore....................................OK
Installing 7signal truststore....................................OK
Extracting Analyzer keystore.....................................OK
Extracting truststore password...................................OK
Extracting keystore password.....................................OK
Modifying configuration files....................................OK
13.3 Updating Carat GUI certificates (Linux)
Step 1: Login to Carat GUI host
Step 2: Change to Carat GUI installation directory
For example:
# cd /opt/7signal/ClientGUICarat
Step 3: Update certificates by using update_certificates tool
# ./update_certificates /path_to_package/mycerts-7signal-all.tar.gz