[vRNI] [3.x] Managing custom certificate files that have been uploaded via an alternative mechanism
book
Article ID: 315097
calendar_today
Updated On:
Products
VMware Aria Operations for Networks
Issue/Introduction
Normally, when updating the certificate on a vRealize Network Insight implementation, the custom-cert command is used to copy the new certificate and key files to the system, as can be seen in the following instructions:
However, SFTP may not be available or may be failing for an unknown reason. This article provides details so that the files can be made available if uploaded through an alternate mechanism.
Symptoms: Symptoms__c Place holder
Environment
VMware vRealize Network Insight 3.x
Resolution
In order to stage the custom certificate files for use with the custom-cert command, please use the following instructions.
Transfer the files to the system.
Example one: Use sftp to transfer the files to the system.
Using the sftp client of your choice, create a connection to the vRNI VM and log in as the support user.
Select a destination (e.g., /home/support or /tmp) and upload the files.
Example two: Log into the system and transfer the file from a remote location.
Initiate an SSH session to the VM and log in as the support user.
Type 'ub' to change to the ubuntu user.
Change to the custom certificate staging directory: cd /home/ubuntu/custom_certs
Using the preferred method (i.e., ftp, sftp, wget, etc.), transfer the file to the current directory.
Initiate an SSH session to the VM and log in as the support user.
Type 'ub' to change to the ubuntu user.
Move the file to the custom certificate staging directory.
Change to the custom certificate staging directory: cd /home/ubuntu/custom_certs
Move the file to the current directory. For example, the following moves the file custom.crt from the /tmp directory:
sudo mv /tmp/custom.crt .
Change the owner and group to ubuntu, similar to the following example:
sudo chown ubuntu:ubuntu custom.crt
Set the appropriate permissions (700) on the file, for example:
sudo chmod 700 custom.crt
Additional Information
For details on the use of the custom-cert command, please refer to the following document: