Enabling Short Lived Nats Credentials in Ops Manager 2.10

Products

• Operations Manager

Issue/Introduction

How to enable Short Lived Nats Credentials in Ops Manager 2.10 ?

Environment

Product Version: 2.10

Resolution

For more information about Short Lived Nats Credentials you can visit the Documentation .

Ops Manager 3.0 allows you to enable this feature using the UI. For Ops Manager 2.10 you can enable it using an Override configuration.
 

Procedure

1. Set Ops Manager to advanced mode by following this How to Enable Advanced Mode in the Ops Manager . 

2. Use the /api/v0/staged/director/overrides endpoint to override the flag `enable_short_lived_nats_bootstrap_credentials` value to true.
The following uaac curl command is an example on how to override the flag to `true`:
 

uaac curl "http://<YOUR-OPS-MAN-FQDN>/api/v0/staged/director/overrides" -X PUT --data '{"overrides" : [{"section": "instance_groups", "data": {"director": {"enable_short_lived_nats_bootstrap_credentials": true }}}]}'

3. After you have completed your changes, deactivate Advanced Mode by following the procedure in How to Enable Advanced Mode in the Ops Manager in the Knowledge Base.

4. Return to the Ops Manager Installation Dashboard.

5. Click Review Pending Changes

6. Click Apply Changes
 

Important notes

This configuration affects all new deployments of Ops Manager. If you want to configure VMs in existing Ops Manager deployments to use short-lived bootstrap credentials, you must re-create them.

You can use short-lived NATS bootstrap credentials in Ops Manager v2.10.54 and above (on 2.10 line).
You can configure short-lived bootstrap credentials for VMs using the following Stemcells:

• Windows 2019.41 and later
• Xenial 621.171 and later
• Bionic 1.36 and later
• Jammy 1.95 and later

Please note: All Jammy versions are compatible with the short-lived NATS credentials feature; however, Jammy versions prior to 1.95 contain a known issue when this feature is active that causes failures if a VM is recreated while a disk resize occurs.

If you configure short-lived bootstrap credentials for VMs using unsupported stemcells, the VMs become unresponsive.