Upload certificates from client computers after reinstallation

[wwwanaya]

Hello,

I want to know if is possible to use client certificates and upload them to the FogServer in the order to make them match after re-install Fog. I didn’t knew that the certificate would change by reinstalling.

I been through the forums but no one is asking this question, it is impossible to make them match?

Regards,

[Junkhacker]

you re-issue certificates to the clients by using the “reset encryption data” button. you can apply this to single hosts or to groups.

[falko]

Check this https://wiki.fogproject.org/wiki/index.php?title=FOG_Client#Maintain_Control_Of_Hosts_When_Building_New_Server

[Joe Schmitt]

@wwwanaya see the link @falko posted. Unfortunately there is no way to regain control of the client if you did not preserve your server certificates. You will need to re-install all deployed clients to regain control of them.

[falko]

@Joe-Schmitt not done an install in a while, is there a prompt in the installer to make a copy of that certificate. It may be worth adding it?

[Tom Elliott]

The certificate stored on the “clients” is the Public certificate from the FOG Server.

The only certificates to backup are in /opt/fog/snapins/ssl on the main FOG Server. As long as the public cert the clients receive match the originating server’s private certificate CA signature, all will be well.

So there’s nothing to do with the “FOG Client” install.

As of FOG 1.4.0-RC-3 the /opt/fog/ssl directory is backed up to other storage nodes as necessary too.