How Can I Import an MDC User Database Cascade Security Certificate?

1.Use WinSCP to copy the security certificate (including files cacert.pem, server.crt, and server.key) to the /home/permitdir directory of the active OMS for the CDC.

Use the opadmin account and floating IP address of the management plane to log in to the active OMS.

For details about how to use WinSCP, see How Can I Use WinSCP to Transfer a File in the HUAWEI OceanStor UDS Massive Storage System V100R002C01 Software Installation Guide.


2.Use PuTTY to log in to the active OMS.

Use the opadmin account and Floating IP address of the management plane for login. Run the su - root command to switch to the root account.


3.Run the following command to disable the automatic exit of PuTTY.
TMOUT=0

4.Run the following command to import the security certificate.

sh /opt/obs/scripts/upf/replaceGaussCA.sh -f /home/permitdir –p passwordpassword is the password of the server.key file.

After the certificate is imported successfully, the following output is displayed:
server started
5.Import the security certificate to the standby OMS. OMS02 is used as an example.
a.Run the cd /home/permitdir command to go to the /home/permitdir directory of the active OMS.
b.Run the following command to copy the security certificate (including files cacert.pem, server.crt, and server.key) from the active OMS to the /home/permitdir directory of OMS02.

scp cacert.pem server.crt server.key opadmin@OMS02:/home/permitdir

The opadmin account and password of OMS02 are required.

After the certificate file is copied successfully, the following output is displayed:
cacert.pem 100% 952 0.9KB/s 00:00
server.crt 100% 3046 3.0KB/s 00:00
server.key 100% 891 0.9KB/s 00:00
c.Run the ssh opadmin@OMS02 command to log in to OMS02.
The opadmin account and password of OMS02 are required. After the login, run the su - root command to switch to the root account.

d.Run the following command to disable the automatic exit of PuTTY.
TMOUT=0

e.Import the security certificate to the standby OMS. For details, see Step 4.
6.Import the security certificate for the GSDC and GADC respectively. For details, see Step 1 to Step 5.

Scroll to top