Updating the host name or domain name of the DSG or ESA

Perform the following steps if the hostname or FQDN of a DSG node is changed.

1. Remove this DSG node from the DSG TAC.

   1. On the DSG Web UI, navigate to System > Trusted Appliances CLuster.

   2. Under the Management drop down, select Leave Cluster.

2. If the custom certificates are used, regenerate these certificates with the updated hostname.
   

3. If the custom certificates are not used, regenerate the certificate using the following command.
   

   python3 -m ksa.cert.manager --installation-apply
   

   Caution: Run this command only on the DSG node where the hostname or FQDN has changed.

4. Ensure that the TAC is created on ESA.

   For more information about creating a TAC, refer to Create a TAC on ESA.

5. Run the ESA communication process.
   For more information, refer to Setting up ESA communication.

6. If the current DSG node was registered with ESA, then register the DSG node.
   For more information, refer to Registering the DSG.

7. If single DSG node was present in the DSG-DSG TAC, then register the DSG node.
   For more information, refer to Registering the DSG.

8. If DSG node is not registered with the ESA and there are multiple DSG nodes present in DSG-DSG TAC, then add the DSG node to the cluster.
   Adding a DSG node

Perform the following steps if the hostname or FQDN of a ESA node is changed.

1. If the custom certificates are used, regenerate these certificates with the updated hostname.
   

2. If the custom certificates are used, then to choose the latest certificates, run the following steps.

   1. On the DSG Web UI, navigate to Settings > Network > Manage Certificates.

   2. Under the Management area, select Change Certificates.

   3. Under CA Certificate(s), unselect the CA certificate from ESA. Click Next.

   4. Under Server Certificates, retain the default settings. Click Next.

   5. Under Client Certificates, ensure that only the latest DSG System client certificate and key is selected.

   6. Click Apply.

3. If the custom certificates are not used, regenerate the certificate using the following command.
   

python3 -m ksa.cert.manager --installation-apply

Caution: Run this command only on the ESA node where the hostname or FQDN has changed.

4. Update the ESA configuration after updating the host name or domain name of the ESA machine.
   For more information, refer to Update the ESA configuration.

5. After updating the certificates, ensure that the set ESA communication steps are performed on each DSG node.
   

   For more information about set ESA communication, refer to Set communication process.

6. Configure the DSG to forward the logs to Insight on the ESA.
   For more information, refer to Forwarding Logs to Insight|