Updating the expired SSL certificate on Instana OnPrem installation

If you wish to attach an SSL for your on-prem instance this will need to be a self-signed SSL because the SSL certificate is valid for 365 days, it will need to be updated every year.
To update the SSL certificate there are to commands that you need to type into the command line:
  1. Import the SSL certificate
openssl req -x509 -newkey rsa:2048 -keyout server.key -out server.crt -days 365 -nodes -subj "/CN=<hostname>"

     2. Update the settings.hcl file 

instana update -f path_to_settings.hcl 

 

For package based on-prem installations (v164 and lower):

Settings are located in settings.yaml at, by default, /etc/instana/settings.yaml ​ Check here for example of settings.yaml file. Please take a note that this is yaml not hcl file so watch for proper formatting.
In addition to this, command instana update won't work since it was introduced for the first time in v.170 of the instana-console.

You need to use instana-configure instead in order to pull new configuration from settings.yaml file.

Have more questions? Submit a request

Comments