How do I regenerate an NSP system token?

Purpose

Perform this procedure to regenerate an NSP system token on either a standalone NSP deployment or a DR deployment.

Steps
Standalone NSP
 
1 

Log in as the root or NSP admin user on the NSP deployer VM.


2 

Regenerate the system token:

# cd <NSP DEP build path>/bin

# ./nspdeployerctl secret -s system-token -n nsp-psa-restricted -r system-token=32 update

End of steps

DR NSP
 
1 

Log in as the root or NSP admin user on the active and standby NSP deployer VMs.


2 

Regenerate the system token on the active NSP deployer VM:

# cd <NSP DEP build path>/bin

# ./nspdeployerctl secret -s system-token -n nsp-psa-restricted -r system-token=32 update


3 

Fetch the regenerated system token from the active deployer VM:

# ./nspdeployerctl secret -s system-token -n nsp-psa-restricted -s system-token -o /<Token_Save_Path>/regen-systoken.aes fetch


4 

Copy the fetched token file (regen-systoken.aes) from the deployer VM to the standby deployer VM.


5 

Install the regenerated system token secret on the standby deployer VM. On the standby deployer VM:

# cd <NSP DEP build path>/bin

# ./nspdeployerctl secret -n nsp-psa-restricted -s system-token -f /<Token_Save_Path>/regen-systoken.aes update

End of steps