Manage TLS certificates using GUI
Last updated
Last updated
Upon system installation, the cluster's TLS certificate is activated with an auto-generated self-signed certificate, enabling access to the GUI, CLI, and API via HTTPS. If you have a custom TLS certificate, you may replace the auto-generated self-signed certificate with your own. Additionally, you can download the existing TLS certificate for integration with other applications that require communication with the cluster, such as Local WEKA Home.
Procedure
From the menu, select Configure > Cluster Settings.
From the left pane, select Security.
In the TLS Certificate section, select Set TLS certificate.
In the Set Custom TLS Certificate dialog, do one of the following:
Select Upload TLS certificate files, and upload the TLS certificate and private key files.
Select Paste the custom certificate content, and paste the content of the TLS certificate and private key.
To download the existing TLS certificate, select Download TLS certificate. In the dialog, set a name for the certificate and select Download.
The system uses well-known CA certificates to establish trust with external services. For example, when using a KMS. If a different CA certificate is required for Weka servers to establish trust, set this custom CA certificate on the Weka servers.
Procedure
From the menu, select Configure > Cluster Settings.
From the left pane, select Security.
In the TLS Certificate section, select Set custom CA certificate.
In the Set Custom CA Certificate dialog, do one of the following:
Select Upload CA certificate file, and upload the custom CA certificate file.
Select Paste the custom certificate content, and paste the content of the custom CA certificate.
Select Save.
Once a CA certificate is set, you can:
Replace the CA certificate with a new one according to the deployment needs.
Remove (reset) the custom CA certificate settings.
Download the existing CA certificate for later use.
Procedure
From the menu, select Configure > Cluster Settings.
From the left pane, select Security.
In the TLS Certificate section, select Replace custom CA certificate.
In the Set Custom CA Certificate dialog, do one of the following:
Select Upload CA certificate file, and upload the custom CA certificate file.
Select Paste the custom certificate content, and paste the content of the custom CA certificate.
Select Save.
If required to remove the custom CA certificate, select Reset custom CA certificate settings. In the confirmation message, select Yes.
To download the existing CA certificate, select Download custom CA certificate. In the dialog, set a name for the certificate and select Download.
Related topic
