Replace Service Manager Service Portal generated certificates

The Service Manager Service Portal Cluster uses GlusterFS to synchronize Service Manager Service Portal configuration files across the entire cluster. Therefore, all SSL configuration changes should be made on a single node (usually the load balancer node).

To set up SSL, replace the Service Manager Service Portal generated SSL certificates with CA-signed certificates. To do this, follow these steps:

  1. Connect to load balancer node:

    # ssh propel@<lb_host>
  2. Stop Service Manager Service Portal:

    # ansible propel -a "propel stop"
  3. Follow the steps in Replace the Service Manager Service Portal generated SSL certificates.
  4. Restart Service Manager Service Portal:

    # ansible propel -a "propel start"