Amazon Web Services for vROps - Manually Importing an SSL Certificate

Products

• VMware Aria Suite

Issue/Introduction

If you are facing an issue regarding the initial SSL certificate installation or an expired certificate with the Amazon Web Services adapter, you may need to import a certificate manually.  This includes the Review and Accept message box that asks you to accept a trust relationship to a certificate that is outdated or a new install of the Amazon Web Services adapter where no SSL exists yet.

To manually import the certificate it may be easiest to connect to the vRops collector that is running the instance through an SSH terminal.

Replace <REGION> with the AWS region you are connected to and run the command below:

openssl s_client -showcerts -connect apigateway.<REGION>.amazonaws.com:443 </dev/null 2>/dev/null|openssl x509 -outform PEM >mycertfile.pem

Then import the certificate into the vRops keystore by running this command:

$VCOPS_BASE/jre/bin/keytool -import -alias awscertkey -file ./mycertfile.pem -keystore "$VCOPS_DATA_VCOPS/user/conf/ssl/tcserver.truststore" -storepass `grep ssltruststorePassword /storage/vcops/user/conf/ssl/storePass.properties | sed s/ssltruststorePassword=//` -trustcacerts

This will import the Amazon Web Services SSL into vRops.  Afterwards you may have to restart the vRops server for the changes to take effect.

Environment

VMware vRealize True Visibility Suite 1.0