Image Artist: Introducing new TLS certificates

The configure_webserver.sh script performs the required actions to replace the existing TLS certificates used by the Image Artist web server. You can find this script in the nginx directory located within the Image Artist base installation directory.

View Available Options

To see all available parameters:

Replacing Certificates on the Image Artist Host

configure_webserver.sh should be executed when the Image Artist stack is undeployed. 

configure_webserver.sh --certificate <NEW_CERT_FILE> --private-key <NEW_KEY_FILE> --remove-old-certs

Replace the placeholders (<NEW_CERT_FILE>, etc.) with the paths to your new certificate files.

Replacing Certificates on the HPC Cluster (Optional)

If Image Artist is configured to submit Batch Analysis jobs to a High-Performance Computing (HPC) cluster, the certificates must also be updated on the cluster nodes so that the cluster can securely communicate with the Image Artist host. 

• For Ubuntu-based HPC systems:
  • Move the certificate to the system's trusted certificate directory:
    /usr/local/share/ca-certificates/
  • Run update-ca-certificates to register the new certificate.
• For Red Hat-based HPC systems:
  • Ensure the ca-certificates package is installed.
  • Copy both the server and CA certificates to:
    /etc/pki/ca-trust/source/anchors/
  • Update the trust store: 
    sudo update-ca-trust

Final Step: Redeploy the Image Artist Stack

Refer to Image Artist: How do I redeploy/restart the container stack?