How to replace the vCloud Usage Meter 4.5 and 4.6 certificate in VAMI

Products

• VMware Aria Suite

Issue/Introduction

Symptoms:
This KB article explains how to replace the Usage Meter 4.5/4.6 certificate in VAMI with a custom certificate. How to create a custom certificate, you can learn from the following KB article.

Environment

VMware vCloud Usage Meter 4.x

Resolution

Procedure

1. Log in to vCloud Usage Meter 4.5/4.6 console as root.
2. Assuming you are using the default location of the TLS certificate and private key for the nginx service, use the following command; otherwise,  adjust the paths to the private key and certificate file.

cat /etc/ssl/private/nginx-selfsigned.key /etc/ssl/certs/nginx-selfsigned.crt > /opt/vmware/etc/lighttpd/server.pem

3. Restart the Usage Meter appliance.
4. Verify if the certificates are replaced. Assuming you are logged in to the Usage Meter appliance, compare the fingerprints returned by executing the following commands. The output should be the same.

Note: Replace the localhost with the Usage Meter IP address if you run those commands from a different computer.

openssl s_client -connect localhost:8443 < /dev/null 2>/dev/null | openssl x509 -fingerprint -noout -in /dev/stdin

openssl s_client -connect localhost:5480 < /dev/null 2>/dev/null | openssl x509 -fingerprint -noout -in /dev/stdin