Renewing the Spectrum Protect server certificate on all connected clients can be a time consuming activity. Manually doing it involves several steps such as generating the new certificate on server and then manually copying it to client machine and finally adding it into the client side key-store file.
Repeating these steps for hundreds or thousands of clients will require a bigger manpower to complete it within a given short timeframe such as a week or will need more time.
This manual effort can be substantially reduced by the automation which uses scheduled commands to be executed on all clients. These set of commands defined within schedules will be executed one after another. First few schedules will append part of the certificate file text into a new file and then final schedule will add this certificate in key-store.
This automation is provided in the form of scripts. BASH script for RedHat and AIX platform and POWERSHell script for Windows platform. This script will be executed from the ADMIN client which can connect to server. This script can be used to distribute the certificate and generate status report for all clients and finally cleanup schedules when distribution is successful.
Supported client types are :
- IBM Storage Protect Backup-Archive client
- IBM Storage Protect for Space Management
- IBM Storage Protect for Virtual Environment
- IBM Storage Protect for Mail
- IBM Storage Protect for Databases
- IBM Storage Protect Snapshot
- IBM Storage Protect for Enterprise Resource Planning
For more details on this refer documentation Automating the distribution of IBM Storage Protect server certificate to clients.
Tech-Note to download this automation scripts is locate at https://www.ibm.com/support/pages/node/7084990.