< Home

update server

Function

The update server command sets the parameters for connecting to the update server.

The undo update server command restores the default settings of the update server.

Format

update server { domain domain-name | ip ip-address } [ port port-number ]

update server ca-certificate certificate-file-name

update server ca-certificate certificate-file-name

undo update server

Parameters

Parameter Description Value

domain domain-name

Specifies the domain name of the update server.

The value is a string of 1 to 64 characters, spaces not supported.

ip ip-address

Specifies the IP address of the update server.

The value is in dotted decimal notation.

port port-number

Specifies the port number of the update server.

The value is an integer ranging from 1 to 65535.

ca-certificate certificate-file-name

Specifies the CA certificate used for the update service.

NOTE:
  • The certificate specified using this parameter is the CA certificate used by the device to communicate with the Huawei security center (sec.huawei.com) through HTTPS. This certificate applies not only to the signature database update service but also to the data feedback and remote query services.
  • Only certificates in PEM format are supported.

The value must be the name of an existing certificate.

ca-certificate certificate-file-name

Specifies the CA certificate used for the update service.

NOTE:
  • The certificate specified using this parameter is the CA certificate used by the device to communicate with the Huawei security center (sec.huawei.com) through HTTPS. This certificate applies not only to the signature database update service but also to the data feedback and remote query services.
  • Only certificates in PEM format are supported.

The value must be the name of an existing certificate.

Views

System view

Default Level

3: Management level

Usage Guidelines

By default, the domain name of the update server is sec.huawei.com, the HTTP port number is 80 and the HTTPS port number is 443, and the update service uses the CA certificate (default_ca.cer) preset on the device.

When you run the undo update server command, the CA certificate used for the upgrade service is restored to the preset CA certificate (default_ca.cer). In this case, ensure that the preset CA certificate (default_ca.cer) exists in the system. Otherwise, an exception may occur during the restoration of the default configuration. If the preset CA certificate (default_ca.cer) has been deleted, you need to import it again and name it default_ca.cer before running the undo update server command.

Example

# Set the IP address of the update server to 10.1.1.1 and port number to 86.

<sysname> system-view
[sysname] update server ip 10.1.1.1 port 86
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic