How Do I Update the KMC Master Key on the HCS?

Hi, Lisa!

Have a nice day!

The KMC can automatically update the master key. To query the automatic update policy of the KMC master key, perform the following steps:

1. Use PuTTY to log in to any Service-CSBS node using the IP address corresponding to the CSBS_Service field.

The default account is djmanager. The default password is CloudService@123!.

2. Run the get_master_key_auto_update_policy command to query the automatic update policy of the KMC master key.

[djmanager@karbor1 ~]$ get_master_key_auto_update_policy 
+------------------+------------+
|    parameter     |   value    |
+------------------+------------+
|  interval_days   |    730     |
| last_update_time | 2020-09-08 |
+------------------+------------+

How to upgrade the KMC master key

1. Use PuTTY to log in to any Service-CSBS node using the IP address corresponding to the CSBS_Service field.

The default account is djmanager. The default password is CloudService@123!.

2. Run the following command to update the KMC master key:

sudo /opt/huawei/dj/bin/kmc/kmc_update_master_key.sh -s

sudo /opt/huawei/dj/bin/kmc/kmc_update_master_key.sh -s 
[INFO] Generate KMC master key success.
[INFO] Sync KMC master key success.
[INFO] Update KMC master key success.

3. Back up all files in /opt/huawei/dj/paas, which can be used for disaster recovery.

Hope can help you!