{"id":18046,"date":"2023-02-23T04:59:15","date_gmt":"2023-02-23T04:59:15","guid":{"rendered":"https:\/\/www.insentragroup.com\/nz\/?p=18046"},"modified":"2024-12-13T01:57:14","modified_gmt":"2024-12-13T01:57:14","slug":"replacing-ansible-automation-private-automation-hub-pah-certificates","status":"publish","type":"post","link":"https:\/\/www.insentragroup.com\/nz\/insights\/geek-speak\/modern-workplace\/replacing-ansible-automation-private-automation-hub-pah-certificates\/","title":{"rendered":"Replacing Ansible Automation Private Automation Hub (PAH) Certificates"},"content":{"rendered":"\n<p>This blog describes the process required to replace the certificates for PAH.&nbsp;<\/p>\n\n\n\n<p>The Ansible Automation Hub is made up of two nodes, aaph01 and aaph02, that both utilise the shared NFS storage to store execution environment images (containers) and ansible collections. The hub is configured for high availability and a Load Balancer is used to distribute traffic to available nodes. The Load Balancer can be accessed using the fully qualified domain name(FQDN): aaph.example.net. To renew the certificates, a new certificate for aaph.example.net has to be generated and installed on the Load Balancer and on both nodes of the Private Automation Hub (PAH).&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Process&nbsp;<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Generate the certificate for aaph.example.net&nbsp;&nbsp;<\/li>\n\n\n\n<li>Replace the certificates on the Load Balancer&nbsp;<\/li>\n\n\n\n<li>Copy the certificate and key to both nodes of the PAH: aaph01 and aaph02&nbsp;<\/li>\n\n\n\n<li>Make sure to rename the certificates to: pulp_webserver.crt and pulp_webserver.key&nbsp;<\/li>\n\n\n\n<li>Login to both servers. Root permissions are required&nbsp;<\/li>\n\n\n\n<li>Navigate to \/etc\/pulp\/certs&nbsp;<\/li>\n\n\n\n<li>Backup existing certificates&nbsp;<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>cp \/etc\/pulp\/certs\/pulp_webserver.crt \/etc\/pulp\/certs\/pulp_webserver.crt.date \n\ncp \/etc\/pulp\/certs\/pulp_webserver.key \/etc\/pulp\/certs\/pulp_webserver.key.date <\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Copy new certificates to \/etc\/pulp\/certs:&nbsp;&nbsp;<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>cp \/home\/temp\/pulp_webserver.crt \/etc\/pulp\/certs\/pulp_webserver.crt \n\ncp \/home\/temp\/pulp_webserver.key \/etc\/pulp\/certs\/pulp_webserver.key <\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Ensure that the permissions match those of the original files&nbsp;<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>chown root:pulp \/etc\/pulp\/certs\/pulp_webserver.crt \n\nchown root:pulp \/etc\/pulp\/certs\/pulp_webserver.key \n\nchmod 600 \/etc\/pulp\/certs\/pulp_webserver.crt \n\nchmod 600 \/etc\/pulp\/certs\/pulp_webserver.key <\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Restore SELinux context on the certificates&nbsp;<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>restorecon -v \/etc\/pulp\/certs\/pulp_webserver.crt \n\nrestorecon -v \/etc\/pulp\/certs\/pulp_webserver.key <\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Restart nginx on both servers&nbsp;<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>systemctl restart nginx \n\nsystemctl status nginx <\/code><\/pre>\n\n\n\n<p>In conclusion, ensuring your Private Automation Hub (PAH) is secure is essential for your organization&#8217;s overall cybersecurity. With our step-by-step guide, replacing the certificates for your PAH with Ansible Automation is easy and secure. By generating and installing new certificates for the Load Balancer and both nodes, you can keep your automation up-to-date and secure. Don&#8217;t risk your organization&#8217;s security &#8211; replace your certificates today. <a href=\"https:\/\/www.insentragroup.com\/nz\/contact\/\" target=\"_blank\" rel=\"noreferrer noopener\">Contact us<\/a> if you need further assistance with replacing your Private Automation Hub certificates with Ansible Automation.&nbsp;&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Related Articles<\/h2>\n\n\n\n<a href=\"https:\/\/www.insentragroup.com\/nz\/insights\/geek-speak\/modern-workplace\/introduction-to-ansible-builder\/\" target=\"_blank\" rel=\"noreferrer noopener\">Introduction to Ansible Builder<\/a><br>\n<a href=\"https:\/\/www.insentragroup.com\/nz\/insights\/geek-speak\/modern-workplace\/ansible-disaster-recovery-guide-aws\/\" target=\"_blank\" rel=\"noreferrer noopener\">Ansible Disaster Recovery Guide AWS<\/a><br>\n<a href=\"https:\/\/www.insentragroup.com\/nz\/insights\/geek-speak\/modern-workplace\/how-to-configure-ansible-automation-saml-sso-with-red-hat-sso\/\" target=\"_blank\" rel=\"noreferrer noopener\">How to configure Ansible Automation SAML SSO with Red Hat SSO<\/a>\n\n\n\n<style>\nbody .wp-block-code>code {\n    font-family: Menlo,Consolas,monaco,monospace;\n    color: #000;\n    padding: 30px 40px;\n    border: none;\n    border-radius: 4px;\n    background: #ddd;\n}\nbody .blog-body ol li::marker {\n    font-weight: 600;\n}\n<\/style>\n","protected":false},"excerpt":{"rendered":"<p>Learn how to replace Private Automation Hub certificates with Ansible Automation in our step-by-step guide. Keep your automation secure and up-to-date. <\/p>\n","protected":false},"author":67,"featured_media":18050,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[19],"tags":[],"class_list":["post-18046","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-modern-workplace","entry"],"_links":{"self":[{"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/posts\/18046","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/users\/67"}],"replies":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/comments?post=18046"}],"version-history":[{"count":5,"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/posts\/18046\/revisions"}],"predecessor-version":[{"id":18361,"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/posts\/18046\/revisions\/18361"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/media\/18050"}],"wp:attachment":[{"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/media?parent=18046"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/categories?post=18046"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/tags?post=18046"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}