Regenerate the Tenable Security Center Director Server Certificate

Required Tenable Security Center User Role: tns user

Required Tenable Security Center User Role: Root user

Tenable Security Center Director ships with a default server certificate that is valid for two years. After the certificate expires, you must regenerate the SSL certificate.

To regenerate the Tenable Security Center Director SSL certificate:

  1. Log in to Tenable Security Center Director via the command line interface (CLI).

  2. In the CLI in Tenable Security Center Director, run the following command to switch to the tns user:

    su - tns

  3. As the tns user, run the following command:

    /opt/sc/support/bin/php /opt/sc/src/tools/installSSLCertificate.php

    (Optional) If you want to suppress the self-signed warning or specify a Common Name, include an optional argument.

    Argument Description
    -q Suppresses the warning: This script generates a self-signed SSL certificate, which is not recommended for production.
    -h <IP|host name> Specifies an IP address or hostname that will be used as the Common Name for the certificate.

    Tenable Security Center Director generates a new certificate.

  4. Run the following command to exit the tns user:

    exit

  5. As the root user, run the following command to restart the Tenable Security Center Director service:

    # service SecurityCenter restart

    The service restarts and Tenable Security Center Director applies the new certificate.