External indexer upgrade log message asks to run indexer-certs-converter which removes the indexer private key (4384332)

During the upgrade of the External Indexer, the upgrade process displays a message recommending that the administrator run /usr/bin/indexer-certs-converter to migrate certificate/key configuration to the new format. When running this script as recommended, this results in the deletion of the private key that was present in /etc/indexer/indexer-keys.cfg.

STATUS

Change Request # 730624 was submitted to address this issue in a future release, subject to successful QA and Product Management approval.

WORKAROUND

 if the administrator has the certificate and private key that was lost, you can add it again to the external indexer using the "indexer-keys-json" tool.

1. In the /opt/external-indexer/usr/bin/ folder, issue the following command: indexer-keys-json
2. Enter the absolute path to the X.509 certificate. Alternatively, you can include this information as a parameter: indexer-keys-json --cert <path-to-certificate>
3. Provide the absolute path to the corresponding private key. Alternatively, you can include this information as a parameter: indexer-keys-json --private-key <path-to-private-key>
4. If the key is password protected, enter the password to the private key.
5. To add additional certificates, re-run the indexer-keys-json command