Tranquil IT Forum

Hello,
I need to change the WAPT server name. Clients should now contact the server at waptclg.mycompany.fr instead of waptclg01.toto.local.
My DNS records have been updated to point to my server's IP address: waptclg.mycompany.fr.
On the server, which is running Debian 13, I modified the name using
`hostnamectl set-hostname waptclg.mycompany.fr`
and also using
`nano /etc/hosts`.
I assume I need to run `/opt/wapt/waptserver/scripts/postconf.sh`?
What other modifications are necessary? How do I re-certify the server?
I haven't deployed the agent to the workstations yet.

Thank you.

WAPT ENTERPRISE license,
2 WAPT client instances
: soon to reach 2200 on the new instance.

Hi Skoizer,

Since the workstations will have the old name in their configuration, the transition will need to be managed carefully. This is the thing you need to pay the most attention to.

Is the old certificate self-signed or not? Is the new one self-signed or not? Is HTTPS certificate verification enabled, pinned (i.e., it points to a certificate file on the server), or does it validate against a standard bundle?

If you update the agents via waptdeploy using GPO, then you just need to recreate an agent with the new configuration (URL + certificate configuration). If there are workstations outside the domain, you need to be careful with the transition so they aren't left behind.

Can the old server remain running in parallel for a while, so you can push an xyz-waptupgrade package with the new configuration?

Best regards,

Denis

Thank you for your reply.
It was a new WAPT server, so I don't have any clients yet.
I ended up recreating the server from scratch and generating a self-signed certificate for the packages.
Regarding web server verification, I haven't configured the agent to verify the server certificate.
On
Nginx Debian 13, I've installed Let's Encrypt.
I'm copying the self-generated certificates here:
/opt/wapt/waptserver/ssl/key.pem
and /opt/wapt/waptserver/ssl/cert.pem.

If I do this, will the server verification be handled by Let's Encrypt?