Procedure to regenerate the PacketShaper S-Series self signed certificate.

Products

• PacketShaper S-Series

Issue/Introduction

You want to regenerate the PacketShaper S-Series self-signed Secure Sockets Layer (SSL) certificate.

Resolution

The PacketShaper S-Series allows you to regenerate the SSL certificate back to a new default PacketShaper S-Series digital self-signed SSL certificate. 

Follow the procedure below to regenerate a new PacketShaper S-Series self-signed SSL certificate:

1. Access the PacketShaper S-Series via the direct Serial Console connection port using the Recovery Feature.  See link below for Recovery Feature details:
   https://origin-symwisedownload.symantec.com/resources/webguides/packetguide/11.6/index.htm#Topics/info/recovery-feature.htm
    
2. The recovery menu will appear once you have logged in as the recovery user (Username: recovery, Password: recovery) as described in the Recovery Feature link in Step 1 above.
3. Select option 3 to Regenerate SSL certificate from the recovery menu's recovery action list.
4. Type "YES" and press enter in order for the PacketShaper S-Series to proceed to regenerate the SSL certificate. See the example below:
   You are going to regenerate the SSL certificate of PacketShaper.
   Do you want to proceed? (NO) YES
5. Once the SSL certificate has been generated you will see the following output:
   SSL certificate regenerated.
   Please reboot.
6. After the SSL certificate has been successfully installed, the PacketShaper needs to be rebooted in order for the certificate to be recognized.  Select option 7 to Reboot the PacketShaper S-Series from the recovery menu's action list.
7. Type "YES" and press enter in order for the PacketShaper S-Series to proceed to reboot. See the example below:
   You are going to reboot PacketShaper.
   Do you want to proceed? (NO) YES

Note: Once the PacketShaper S-Series reboots, it will boot up with a new default PacketShaper S-Series digital self-signed SSL certificate.