changes.mady.by.user Petteri Kivimäki
Saved on Aug 29, 2023
...
Connect to the Security Server using SSH.
Switch to the xroad user using sudo.
$ sudo su - xroad
Initialize the software token using signer-console. In practisepractice, this means reseting the PIN code. After this step the keys generated with the old PIN code cannot be used anymore.
$ signer-console init-software-token PIN: retype PIN:
Log off from the server and log in to the Security Server admin console at https://{HOST}:4000.
https://{HOST}:4000
Configure the signing key and certificate for the Security Server owner (instructions).
Configure the authentication key and certificate for the Security Server (instructions).
Register the authentication certificate (instructions).
Configure the signing key and certificate for each Security Server client (instructions).