How to import certificate into Aria Operations for logs trust store

Products

• VMware Aria Suite

Issue/Introduction

This article details how to import the certificate into Aria Operations for logs trust store

Environment

VMware Aria Operations for logs 8.x

Resolution

Follow the below procedure to add certificate into Aria Operations for logs trust store:

• Log into the primary node as root via SSH or Console.
• Run the below command to import the certificate into trust store:

/usr/java/jre-vmware/bin/keytool -import -alias <certificate_name> -file <path_to_certificate> -keystore /usr/java/jre-vmware/lib/security/cacerts

path_to_cetrtificate is the location where the certificate is stored that needs to be imported, and certificate_name can be any alias of your choice.

Example: /usr/java/jre-vmware/bin/keytool -import -alias cacert -file /tmp/cacert.pem -keystore /usr/java/jre-vmware/lib/security/cacerts

• Repeat above steps on all the nodes in the cluster.
• Run following command to list the contents of the trust store and verify if the certificate imported is showing in the trust store:

/usr/java/jre-vmware/bin/keytool -list -keystore /usr/java/jre-vmware/lib/security/cacerts -storepass changeit

Note: The certificate imported will not be listed in the Aria operations for logs UI, but all SSL connection will succeed because the certificate is in the trust store.