Home > Configuration > SSL > updatesslcertkey

updatesslcertkey

Use this method to updates the certificate or private key in a certificate-key pair. In a high availability configuration, the path to the certificate and the optional private key must be the same on the primary and secondary nodes.

Syntax



Parameters

certkeyname

Name of the certificate-key pair to update.
This is mandatory parameter.

cert

Name of and, optionally, path to the X509 certificate file that is used to form the certificate-key pair. The certificate file should be present on the appliance's hard-disk drive or solid-state drive. Storing a certificate in any location other than the default might cause inconsistency in a high availability setup. /nsconfig/ssl/ is the default path.

key

Name of and, optionally, path to the private-key file that is used to form the certificate-key pair. The certificate file should be present on the appliance's hard-disk drive or solid-state drive. Storing a certificate in any location other than the default might cause inconsistency in a high availability setup. /nsconfig/ssl/ is the default path.

password

Passphrase that was used to encrypt the private-key. Use this option to load encrypted private-keys in PEM format.

fipskey

Name of the FIPS key that was created inside the Hardware Security Module (HSM) of a FIPS appliance, or a key that was imported into the HSM.

inform

Input format of the certificate and the private-key files. The three formats supported by the appliance are: PEM - Privacy Enhanced Mail DER - Distinguished Encoding Rule PFX - Personal Information Exchange
Default value = FORMAT_PEM.

passplain

Pass phrase used to encrypt the private-key. Required when adding an encrypted private-key in PEM format.

nodomaincheck

Override the check for matching domain names during a certificate update operation.

Return Value

Returns simpleResult

See Also