Request and Install a Custom SSL Certificate
CapacityIQ installs a self-signed SSL certificate on the virtual appliance. The self-signed certificate generates
security warnings. If you do not want to use the self-signed security certificate, you can install a custom SSL
certificate for CapacityIQ at the command line. This task is optional and does not affect CapacityIQ capabilities.
If you are familiar with SSL certificate handling, you can use other methods.
Procedure
1
Log in as the ciqadmin user to the CapacityIQ appliance by using an SSH client such as PuTTY.
2
Open a command-line prompt.
3
Enter the
ciq-admin
command to create the certificate request.
Use the following syntax.
ciq-admin ssl genkey
--org-unit
organizationUnit --org-name organizationName
--city
city name --state state/province name --country two-letter country code
[--use IP] [--validity
certificate validity in days]
The certificate signing request (CSR) appears on your screen.
N
OTE
Type your entries with care. You cannot regenerate the CSR without restarting the process.
4
(Optional) If you must start over, include the
--force
flag to regenerate the CSR.
ciq-admin ssl genkey --force
--org unit ...
certificate validity in days]
5
Copy the CSR and send it to a certifying authority to obtain your SSL certificate.
The certificate must be in X509 or .PK7 format.
6
When you have the authorized certificate, use a file-copying tool to upload the certificate file to the virtual
appliance.
This step must be completed correctly. If it is not, you might not be able to install the certificate.
7
Use the
install --cert
option of the
ciq-admin
command to install the certificate.
ciq-admin ssl install --cert
filename
8
Confirm the certificate details.
The certificate details appear in the SSL certificate information area of the HTTPS tab in the Administration
Portal.
The custom certificate replaces the default self-signed certificate that CapacityIQ installed. Installing the
custom certificate restarts CapacityIQ and the ciqadmin processes.
On the Setup tab in the Administration Portal, CapacityIQ updates the HTTPS certificate information with the
new certificate name and certificate expiration date.
What to do next
Grant access to CapacityIQ.
Chapter 2 Installing the CapacityIQ Virtual Appliance
VMware, Inc.
19
