cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 1 of 2

Issues with Apache after canceling migration using Certificate Manager

Jump to solution

We are still testing the migration from SHA-1 to SHA-2 using the Certificate Manager. I have noticed a problem if we were to utilize the "Cancel Migration" option after you activate the newly generated certificate. Basically, the ePO Apache service will not start. In the Windows logs it will state the following error:

The Apache service named reported the following error:
>>> SSLCertificateKeyFile: file 'C:/Program Files (x86)/McAfee/ePolicy Orchestrator/Apache2/conf/ssl.crt/ahpriv.key' does not exist or is empty .

If I go to that folder I noticed that it didn't restore the ahpriv.key which is missing. It also didn't restore the other files under ssl.crt with the backed up copies as it shows the newer timestamps on these files. 

If I restore all the files that used to be in ssl.crt folder from a backup then I can get Apache to start. Why isn't the "Cancel Migration" option not restoring these files from a backup? Also this isn't documented in the KB87017 file.

Do you recommend that we should manually backup these files just incase we need to revert the certificate migration? Also are there any other folders that we need to backup?

 

 

 

1 Solution

Accepted Solutions
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: Issues with Apache after canceling migration using Certificate Manager

Jump to solution

Hello @twenden 

Thanks for your post.

Please refer the below KB articles for regenerating the certificates

https://kc.mcafee.com/corporate/index?page=content&id=KB90182

https://kc.mcafee.com/corporate/index?page=content&id=KB90760

 

.Was my reply helpful?
If you find this post useful, Please give it a Kudos! l Also, Please don't forget to select "Accept as a solution" if this reply resolves your query! 

View solution in original post

1 Reply
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: Issues with Apache after canceling migration using Certificate Manager

Jump to solution

Hello @twenden 

Thanks for your post.

Please refer the below KB articles for regenerating the certificates

https://kc.mcafee.com/corporate/index?page=content&id=KB90182

https://kc.mcafee.com/corporate/index?page=content&id=KB90760

 

.Was my reply helpful?
If you find this post useful, Please give it a Kudos! l Also, Please don't forget to select "Accept as a solution" if this reply resolves your query! 

View solution in original post

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community