TrueNAS SCALE / CORE
Copy link to the page “TrueNAS SCALE / CORE”Renews the TrueNAS Web UI certificate through its API and checks the active certificate chain.
What happens
- The appliance connects to TrueNAS SCALE / CORE through HTTPS REST / JSON-RPC WebSocket on port 443.
- Discovers the TrueNAS version, selected certificate and HTTPS port. Selects REST for older versions and WebSocket from 25.04.
- Imports the certificate, private key and intermediate certificates. Changes only the Web UI certificate and restarts its HTTP service.
- Checks the selected identity and certificate with the complete supplied chain over a fresh TLS connection. If it fails: Restores the previous certificate binding on failure. Preserves a later administrator certificate change.
Technical details
- Connection
- The package runs on the appliance, which connects over HTTPS to HTTPS REST / JSON-RPC WebSocket, port 443. No agent is installed.
- You need
- Dedicated API key with certificate and system.general read/write permissions. TrueNAS 26/27 also requires the key user name.
- Platform
- TrueNAS CORE 12/13 and SCALE
- Actions
- Discovery, Installation, Verification, Rollback
- Packages
-
truenas-api1.0.0 - Note
-
- Appliance 0.4.44 or later. The HTTPS port must be reachable from the appliance. TLS verification is enabled; a self-signed management certificate needs a saved fingerprint or CA file.
- The previous certificate and its native ACME settings remain in TrueNAS. FTP, applications and other certificate bindings are unchanged. Rollback information is kept privately on the appliance.
- TrueNAS API: https://www.truenas.com/docs/scale/25.04/api/; https://www.truenas.com/docs/core/13.3/api/