How do I regenerate an NSP system token?

Purpose

Perform this procedure to regenerate an NSP system token on either a standalone NSP deployment or a DR deployment.

Steps
Standalone NSP
 
1 

On the deployer node, set deleteOnUndeploy: false in the nsp-config.yml

# cd <NSP DEP build path>/<NSP CN build path>/config/

Edit the nsp-config.yml file

platform:

  kubernetes:

    storage:

      deleteOnUndeploy: false

2 

From the deployer node, uninstall NSP:

# cd <NSP DEP build path>/bin

# ./nspdeployerctl uninstall --undeploy --clean

3 

Regenerate the system token:

# ./nspdeployerctl secret -s system-token -n nsp-psa-restricted -r system-token=32 update

4 

Re-install NSP with the regenerated system token:

# ./nspdeployerctl install --config --deploy

End of steps

DR NSP
 
1 

On both active and standby deployer nodes, set deleteOnUndeploy: false in the nsp-config.yml

# cd <NSP DEP build path>/<NSP CN build path>/NSP-CN-25.11.0-rel.406/config/

Edit the nsp-config.yml file:

platform:

  kubernetes:

    storage:

      deleteOnUndeploy: false

2 

On the Standby site deployer node, uninstall NSP:

# cd <NSP DEP build path>/bin

# ./nspdeployerctl uninstall --undeploy --clean

3 

Then from the Active site deployer node, uninstall NSP:

# cd <NSP DEP build path>/bin

# ./nspdeployerctl uninstall --undeploy --clean

4 

Regenerate the system token on the active site:

# ./nspdeployerctl secret -s system-token -n nsp-psa-restricted -r system-token=32 update

5 

Re-Install NSP on the active site with the regenerated token:

# ./nspdeployerctl install --config --deploy

6 

Fetch the regenerated system token from the active site deployer node:

# cd <NSP DEP build path>/bin

# ./nspdeployerctl secret -s system-token -n nsp-psa-restricted -s system-token -o /<Token_Save_Path>/regen-systoken.aes fetch

7 

Copy the fetched token file (regen-systoken.aes) from the active site to the standby site.

8 

Install the regenerated system token secret on the standby site. Then re-install NSP on the standby site with the regenerated token. On the standby deployer node:

# cd <NSP DEP build path>/bin

# ./nspdeployerctl secret -n nsp-psa-restricted -s system-token -f /<Token_Save_Path>/regen-systoken.aes update

# ./nspdeployerctl install --config --deploy

End of steps