Steps to Retrieve and Upload Avi Controller Certificate in License Hub

Products

• VMware Avi Load Balancer

Issue/Introduction

This article explains how to retrieve the system certificate from the Avi Controller and upload it into License Hub during the onboarding process.

Environment

Avi Controller, License Hub

Cause

In License Hub, onboarding of Avi endpoint fails to recognize AVI Controller's 'System-Default-Portal-Cert'.

Resolution

Steps:

1. Retrieve the System Certificate from the Avi Controller
   • SSH to the Avi Controller leader node using admin credentials.
   • Switch to the root user
   • Copy the fetch_cert.sh script to the /opt/avi/scripts/ directory on the Avi Controller.
   • Provide execute permission to the script: chmod +x /opt/avi/scripts/fetch_cert.sh
   • Run the script using 127.0.0.1 or the Avi Controller IP address.
   • Wait for the script execution to complete.
   • Open the generated certificate file (example: full_chain.pem).
   • Copy the complete certificate content.
2. Upload the Certificate in License Hub
   • Return to the License Hub onboarding UI.
   • Paste the copied certificate content into the Certificate field.
   • Continue the onboarding process to establish the connection successfully.

Additional Information

• Script Name: fetch_cert.sh
• Ensure the script is executed as the root user.
• If the script is not run as the root user, a Permission denied error may occur while saving the full_chain.pem file