Page Comparison

...

Info
More information about changing the configuration signing keys is available at https://github.com/nordic-institute/X-Road/blob/develop/doc/Manuals/ug-cs_x-road_6_central_server_user_guide.md#54-changing-the-configuration-signing-keys.

Solution

Panel

bgColor	#fff

Connect to the Central Server using SSH.
Switch to the xroad user using sudo.
Code Block
$ sudo su - xroad
Initialize the software token using signer-console. In practise, this means reseting the PIN code. After this step the keys generated with the old PIN code cannot be used anymore.
Code Block
$ signer-console init-software-token PIN: retype PIN:
Log off from the server and log in to the Central Server admin console at https://{HOST}:4000.
Generate a new configuration signing key (instructions).
Activate the new configuration signing key (instructions).
Delete the old configuration signing key (instructions).
Re-create the configuration anchor(s) (instructions).
Distribute the new internal configuration anchor to the Security Server administrators and the new external configuration anchor to the federation partners.