Desktop Email Encryption

Hi All,

So I have a Linux cluster running Symantec Messaging Gateway on. I have recently (Monday) created a new certificate for the Cluster. I made the mistake of applying the new cert to the Master first rather than the sub. Now when i try to navigate to the web front end to Upload the new cert it is telling me the the old certificate has been revoked (Yes it has)

So am wondering how to remove the old cert from the CLI. Have tried to use the pgpkeytool but its a new thing to me and am not sure am doing it right. Have tried "pgpkeytool --import-cert -file pgp.pem" but it just lists the --help options again.

Total head ache now and needing some help!!!

Its been one of those days its actually a PGP gateway cluster that has the issue not the gateways

Hi Headache_time,

You cannot open the administration console due to the revoked certificate?

These next steps imply modification of the server via CLI. You should contact Technical Support for proper support guidance. The forums are not Technical Support.

Warning: Establishing root access to your PGP Universal Server(s) may violate your support warranty with PGP Corporation, and could lead to system instability. You should not establish root access to your PGP Universal Server(s) unless directed to do so by Technical Support.

Please be aware this was NOT TESTED and can have negative impact in the cluster!

Edit the prefs file and delete the key ID contained within <ssl-keyid></ssl-keyid>
#vim /etc/ovid/prefs.xml
--- snip ---
<ovidprefs>
<network>
<interface>
<interface-id>Interface 1</interface-id>
<adapter>eth0</adapter>
<ip>your_sems_IP_address</ip>
<subnet>your_network_mask</subnet>
<default-gateway>default_gateway_IP_address</default-gateway>
<ssl-keyid>here_is the_keyID</ssl-keyid>
--- snip ---

#pgpsysconf --network
#pgpsysconf --apache

This *should* allow you to open the administration console and then upload the proper certificate.

Then, just to be sure, review the content of /etc/ovid/prefs.xml which should contain the new key ID.


Additionally, please check this article and ensure that these requirements are in place (specially points 11, 12, 13,14 and 16):
Environmental Requirements for Symantec Encryption Management Server (previously PGP Universal Server) clustering - TECH157115


Rgs,
dcats