Additional steps after changing the hostname or FQDN

Perform the following steps if the hostname or FQDN of a DSG node is changed.

  1. Remove this DSG node from the DSG TAC.
    1. On the DSG Web UI, navigate to System > Trusted Appliances CLuster.
    2. Under the Management drop down, select Leave Cluster.
  2. If the custom certificates are used, regenerate these certificates with the updated hostname.
  3. If the custom certificates are not used, regenerate the certificate using the following command.
    python3 -m ksa.cert.manager --installation-apply

    Caution: Run this command only on the DSG node where the hostname or FQDN has changed.

  4. Create a TAC on the DSG node or join an existing TAC.
    For more information about creating a TAC, refer to Create a TAC.
  5. Run the ESA communication process between DSG and ESA.
    For more information about set ESA communication, refer to Set communication process.
  6. Update the host details of DSG on ESA.
    For more information about updating the host file, refer to Updating the host details.
  7. Restart the DSG UI service from the ESA Web UI.
    1. Navigate to System > Services.
    2. Restart the DSG UI service.
  8. Register the DSG node with an existing TAC, run the following command. /opt/protegrity/alliance/3.3.0.0.5-1/bin/scripts/register_dsg_tac.sh script.

If the hostname or FQDN of ESA node is changed, run through the following points.

  1. Ensure that the updated hostname or FQDN of ESA is mapped to the DSG node.
    For more information about updating the host file, refer to Updating the host details.
  2. If the custom certificates are used, regenerate these certificates with the updated hostname.
  3. If the custom certificates are not used, regenerate the certificate using the following command.
    python3 -m ksa.cert.manager --installation-apply

    Caution: Run this command only on the ESA node where the hostname or FQDN has changed.

  4. To choose the latest certificates, run the following steps.
    1. On the DSG Web UI, navigate to Settings > Network > Manage Certificates.
    2. Under the Management area, select Change Certificates.
    3. Under CA Certificate(s), unselect the CA certificate from ESA. Click Next.
    4. Under Server Certificates, retain the default settings. Click Next.
    5. Under Client Certificates, ensure that only the latest DSG System client certificate and key is selected.
    6. Click Apply.
  5. After updating the certificates, ensure that the set ESA communication steps are performed on the DSG node.
    For more information about set ESA communication, refer to Set communication process.
Last modified February 7, 2025