Do I need to install CA signed certificates on only the cluster vserver, or is it required on both cluster vservers and data vservers?
#Install CA signed certificates on cluster vserver, data vserver, or both?
south kindle
quick mist
it's not "required" at all. You can use self-signed certificates then you don't need to install anything
south kindle
Management wants us to secure https access to system manager. I need to at least install a CA signed certificate for the cluster vserver. Is it advisable or needed to also install CA signed certificates for the data vservers?
quick mist
for system manager, it is enough to install a CA-signed certificate in the admin (cluster) SVM
the data SVMs only use HTTPS for API traffic (if configured) or for S3 (in case you use that)
hardy ferry
In the environments I work they they don’t want any self signed certs. We install the root/intermediate ca certs on all svms and then request the appropriate server certificates for all svms
Only necessary on the admin. The security folks push for the others