10.3.3 Delete a Certificate from the NNMi Keystore

The NNMi keystore can hold only one certificate at a time. Before replacing or renewing a certificate on the NNMi management server, you must delete the existing certificate from the NNMi keystore.

To delete a certificate from the NNMi keystore:

1. Change to the directory on the NNMi management server that contains the nnm-key.p12 and nnm-trust.p12 files:

   • Windows: %NnmDataDir%shared\nnm\certificates

   • Linux: $NnmDataDir/shared/nnm/certificates

2. Save a backup copy of the nnm-key.p12 file.

3. Examine the contents of the keystore, and then note down the alias of the existing certificate:

   • Windows:

     %NnmInstallDir%bin\nnmkeytool.ovpl -list -keystore nnm-key.p12 -storetype PKCS12 -storepass nnmkeypass

   • Linux:

     $NnmInstallDir/bin/nnmkeytool.ovpl -list -keystore nnm-key.p12 -storetype PKCS12 -storepass nnmkeypass

4. Delete the existing certificate from keystore by running the following command:

   • Windows:

     %NnmInstallDir%bin\nnmkeytool.ovpl -delete -keystore nnm-key.p12 -storetype PKCS12 -storepass nnmkeypass -alias <alias>

   • Linux:

     $NnmInstallDir/bin/nnmkeytool.ovpl -delete -keystore nnm-key.p12 -storetype PKCS12 -storepass nnmkeypass -alias <alias>

   Note

   The alias, referred to as <alias> in this example, identifies the existing certificate.

5. Restart NNMi by running the following commands:

   Note

   Changes take effect only after restarting NNMi.

   • Windows:

     %NnmInstallDir%bin\ovstop -c
     %NnmInstallDir%bin\ovstart -c

   • Linux:

     $NnmInstallDir/bin/ovstop -c
     $NnmInstallDir/bin/ovstart -c

To Page Top