How to replace expired SSL certificates for Light Point Web

Technical Articles ID: KB92845
Last Modified: 4/11/2023

Environment

Light Point Web

Problem

Connections fail with the message below:

All servers full.

You see the following error message in /var/log/lightpointweb_mc.log:

Unable to register new VM: All Server Registrars failed
STATS: Failure for Pixel Production via license key because All Server Registrars failed
Unable to build Registrar list: Ice.ConnectionRefusedException

Cause

SSL certificates are created with an expiration date. If the certificate expires, communication between the Light Point MasterController (MC) and CloudManager (CM) fails.

Solution

To generate and replace the expired certificates on a standalone server or your primary CM:

Open a command-line session on your Light Point server.
Navigate to <configured location>/LightPointWebUtilities_Enterprise.
Create the certificate.

NOTE: The password in each of these commands must be identical.
1. Type ./create_ca.sh -passwd <password> and press Enter.
  For example: ./create_ca.sh -passwd password
2. Type ./generate_all_certs.sh -capass <password> and press Enter.
  For example: ./generate_all_certs.sh -capass password
Bundle the packages into a deployment package and place them into the <configured location>/LightPointWebUtilities_Enterprise/LPWConfig folder:
Type ./configbuild.sh -mcaddress <your MasterController IP address> and press Enter.

NOTE: This command overwrites an existing folder with the same name.
Deploy the keys:
1. Open <configured location>/LightPointWebUtilities_Enterprise/LPWConfig.
2. Type sudo ./config.sh and press Enter.
Restart your server. All services pick up the new keys.
Allow 30 minutes for the CM to restart its Virtual Machines.

To manually restart them:
1. Type sudo /etc/init.d/lightpointweb_cm stop and press Enter.
2. Type sudo /etc/init.d/lightpointweb_cm refresh and press Enter.

To resolve the error on a secondary CM:

Open a command-line session on your Light Point server and navigate to <configured location>/LightPointWebUtilities_Enterprise.
Create the new SSL certs using the original Utilities folder:

NOTE: The password in each of these commands must be identical.
1. Type ./create_ca.sh -passwd <password> and press Enter.
  For example: ./create_ca.sh -passwd password
2. Type ./generate_all_certs.sh -capass <password> and press Enter.
  For example: ./generate_all_certs.sh -capass password
Create the new deployment folder LPWConfig (step 4 above).
Type ./configbuild.sh -mcaddress <your MasterController IP address> and press Enter.

NOTE: This command overwrites the existing <configured location>/LightPointWebUtilities_Enterprise/LPWConfig folder with a new folder of the same name.
Transfer the LPWConfig folder to each secondary CM.
Deploy the keys:

NOTE: Perform the following steps on each secondary CM instance:
1. Open <configured location>/LightPointWebUtilities_Enterprise/LPWConfig.
2. Type sudo ./config.sh and press Enter.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

How to replace expired SSL certificates for Light Point Web

Environment

Problem

Cause

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

How to replace expired SSL certificates for Light Point Web

Environment

Problem

Cause

Solution

Affected Products

Languages:

Choose your region

Title

Title