Complete the following steps to import an existing certificate and key-pair:

Flowchart for importing an existing certificate and key-pair

  1. Convert the key to .key file. 
    openssl rsa -in private.pem -out private.key
  2. Convert the SSL certificate to .crt file. 
    openssl x509 -in server-cert.pem -out server-cert.crt
  3. Import the cluster key into the keystore using following CLI command. 
    import_cluster_key_pair {key_path} [--yes | -y]
import key pair for cluster server
--yes | -y : import key pair without confirmation prompt
  4. Import the certificate into the keystore using following CLI command. 
    import_cluster_cert {cert_path} [--yes | -y]
import CA signed certificate for cluster server
--yes | -y : import CA signed certificate without confirmation prompt
  5. Restart the ASE cluster for synchronizing the key and the certificate. To restart the ASE cluster, follow the instructions explained in Restart ASE cluster.