Skybox Appliance 6000 Quick Start Guide
Skybox version 11.6.100
52
b. Transfer the concatenated file to
/etc/pki/tls/certs
5. Back up the file
/etc/httpd/conf.d/skyboxwebadmin.conf
6. Create a symbolic link to your certificate:
a. Backup the original Skybox certificate file:
mv /etc/pki/tls/certs/localhost.crt
/etc/pki/tls/certs/localhost.crt.old
b. Create a symbolic link to the new certificate file:
ln -s <customer_certificate_
file> /etc/pki/tls/certs/localhost.crt
where
<customer_certificate_
file>
is the full path and file name to your certificate
c. Change the permissions of the new certificate file:
chmod 600 <customer_
certificate_file>
7. If you are using an intermediate CA certificate, add the following line under the line
SSLCertificateKeyFile
:
SSLCertificateChainFile /etc/pki/tls/certs/ca-chain.cert.pem
Note: If you are using an intermediate certificate, you are required to add the above line
again after an upgrade.
8. Restart the Apache server:
systemctl restart httpd
9. Make sure that the root CA certificate is installed in your browser’s trusted CA certificate
repository.
10. Access Skybox Appliance Administration at
https://<common_name>:444
Exporting the Server certificate and private key from the Java
keystore
To export the server certificate and private key from the Java keystore
1. Log in to the Skybox Server or the Skybox Collector as the root user.
2. Navigate to
/opt/skyboxview/server/conf
3. Create a P12 keystore.
Replace
<alias>
with the alias that you chose when you generated the private key in the
Generating and installing a certificate using the Java keytool procedure.
Replace
<version#>
with the JDK version (for example,
1.8.0_242
).
../../thirdparty/jdk<version#>/bin/keytool -importkeystore -srckeystore
server.keystore -srcstorepass skyboxview -destkeystore
server.keystore.p12 -deststoretype PKCS12 -srcalias <alias> -
deststorepass skyboxview -destkeypass skyboxview
If you do not remember your alias:
a. Execute
../../thirdparty/jdk<version#>/bin/keytool -list -v -keystore
server.keystore -storepass skyboxview
b. Find your server certificate. Above it is the Alias name field; this is your alias.
4. Export the server certificate from the keystore:
openssl pkcs12 -in
server.keystore.p12 -nokeys -out /etc/pki/tls/certs/skybox_cert.pem
