Re: [OpenXPKI-users] Issue: Your system status is critical!

[Oliver W. <ma...@ol...>]

Hi Arthur,

> CRL expired - update required!
Login as Operator, go to "PKI Operations" and "Issue CRL".
I recommend just running a cronjob doing this
/usr/bin/openxpkicmd crl_issuance

> Encryption token is expired
Generate a new Encryption Certificate/Key Pair - as this is used
internally only, you can use a selfsigned one.
Put the key file to /etc/openxpki/ssl/ca-one/ca-one-vault-2.pem

Import the generated certificate and mark it as crypto token
openxpkiadm certificate import  --file vaultcert.crt --realm ca-one
--token datasafe

Note: The password for the key must match the value in crypto.yaml - if
you used the sample setup script, the password is "root".

Oliver

-- 
Protect your environment -  close windows and adopt a penguin!