Updating the certificate for backup storage

When you register a Backup Gateway in Acronis Cyber Protect Cloud or Acronis Cyber Protect, they exchange certificates that are valid for three years. One and a half months before expiration, you will be alerted about the expiring certificate in the admin panel.

Prerequisites

  • The backup storage cluster is created and registered in the Cloud Management Panel, as described in Provisioning backup storage space.
  • Ensure that two-factor authentication (2FA) is disabled for your partner account. You can also disable it for a specific user within a 2FA-enabled tenant, as described in the Acronis Cyber Cloud documentation, and specify the user credentials.
  • If you have enabled login control for the Acronis Cyber Protect Cloud web interface, ensure that the public IP address of your backup storage cluster is specified among the allowed IP addresses, as instructed in the Acronis Cyber Cloud documentation.

To update the certificate

Admin panel

  1. On the Storage services > Backup storage screen, go to the Settings tab, and then click Certificate.
  2. Specify the credentials of a partner account in the cloud or of an organization administrator on the local management server.
  3. Click Update.

The new certificate will be automatically loaded in five minutes.

Command-line interface

Use the following command:

vinfra service backup cluster renew-certificates --reg-account <reg-account>
                                                 --reg-server <reg-server> [--stdin]
--stdin
Use for setting registration password from stdin.
--reg-account <reg-account>
Partner account in the cloud or of an organization administrator on the local management server
--reg-server <reg-server>
URL of the cloud management portal or the hostname/IP address and port of the local management server

For example, to update certificates for the backup cluster, run:

# vinfra service backup cluster renew-certificates --reg-account account@example.com \
--reg-server https://cloud.acronis.com/ --stdin

Specify the registration password when prompted.