Got the password derivation details from support and that was all I needed. Created a new pfx with the same password cntaining cert and key, and copied it in on top of the original key_server.p12, bounced the service and job's a good un !! Nice new shiny non self signed cert now in use !
Thanks for your help in pointing me in the right direction. Much appreciated
Stephen
==
------------------------------
Stephen Dunne
------------------------------
Original Message:
Sent: Sun February 04, 2024 03:53 AM
From: Oktawian Powązka
Subject: Changing LMT Web Interface TLS cert by command line
Hello Stephen,
It is possible to script such procedure (with PS, batch script etc.) except one problem: you need a password for the key_server.p12 file (License Metric Tool keystore file).
Password itself is constructed based on master.tag file content.
Unfortunately this is a public forum so I'll not be able to pass you the exact procedure to derive the password.
You'd have to open a support ticket to us...
------------------------------
Thank you,
Oktawian
Oktawian Powązka, L3 Support
IBM License Metric Tool
Original Message:
Sent: Thu February 01, 2024 07:26 AM
From: Stephen Dunne
Subject: Changing LMT Web Interface TLS cert by command line
Is it possible to script the replacement of the ILMT web UI's cert ? I would like to switch from using self signed certs to using Let's Encrypt certs which expire every 3 months and can be auto installed by PS script
------------------------------
Stephen Dunne
------------------------------