IBM Aspera HST User Manual

| Set up HST Server for Node API | 286
b.
The primary server's certificate.
c.
The entire bundle (as one file).
For a certificate bundle, create a new file named aspera_server_cert.chain in the same directory as the
.pem files. Copy and paste the root certificate into this file, followed by the bundle.
6.
Enable SSL options in aspera.conf.
For information about enabling specific SSL protocols with <ssl_protocol> and enabling specific encryption
ciphers with <ssl_ciphers>, see Configuring the IBM Aspera NodeD Service on page 277.
7.
Restart asperanoded by running the following command:
Run the following commands to restart asperanoded:
# systemctl restart asperanoded
or for Linux systems that use init.d:
# service asperanoded restart
Installing SSL Certificates
Aspera strongly recommends installing valid, signed SSL certificates on your HST Server. The SSL certificates are
uasperanoded and asperahttpd.
Requirements:
• A signed root certificate or certificate bundle (root certificate with chained or intermediary certificates) from an
authorized Certificate Authority. For instructions on generating an SSL certificate, see Setting up SSL for your
Nodes on page 284.
• The certificate is in .pem format. Other formats are not supported.
Procedure Overview:
The procedure modifies or creates three files:
aspera_server_key.pem
• Created automatically during transfer server
installation.
• Found in the default Aspera installation directory: /
opt/aspera/etc
• Contains the default private key.
• In this procedure, you replace the default private
key with the new private key generated with the
certificate signing request (CSR).
aspera_server_cert.pem
• Created automatically during transfer server
installation.
• Found in the default Aspera installation directory: /
opt/aspera/etc
• Contains the default self-signed certificate.
• In this procedure, you replace the default self-signed
certificate with the content described in step 3.
aspera_server_cert.chain
• You create this file, as described below.
• You place the file in the same directory
as aspera_server_key.pem and
aspera_server_cert.pem.

IBM Aspera HST Specifications

General

Brand	IBM
Model	Aspera HST
Category	Server
Language	English