Take a non-memory or powered-off snapshot of your Usage Meter before following the steps below.
Procedure
- SSH to the Usage Meter appliance as usagemeter.
- Run the following command to generate CSR and the key. Replace “server ” with the domain name you intend to secure.
openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr
- You will be prompted to provide the details below:
- Common Name - The FQDN (fully-qualified domain name) you want to secure with the certificate such as www.<FQDN>.com, secure.website.org, *.domain.net, etc.
- Organization - The full legal name of your organization, including the corporate identifier.
- Organization Unit (OU) - Your department, such as ‘Information Technology’ or ‘Website Security.’
- City or Locality - The locality or city where your organization is legally incorporated. Do not abbreviate.
- State or Province - The state or province where your organization is legally incorporated. Do not abbreviate.
- Country - The official two-letter country code (i.e., US, CH) where your organization is legally incorporated.
Note: You are not required to enter a password or passphrase. This optional field is for applying additional security to your key pair.
- Generate a certificate on an Internal CA for use with vCloud Usage Meter. Follow the steps from KB article 2047572 under “Example: Using the Microsoft Windows Certificate Authority”.
- Convert the file from .cer to .crt extension:
openssl x509 -inform PEM -in <HOSTNAME>.cer -out <HOSTNAME>.crt
- Copy the .crt and key file to Usage Meter using the WinSCP client.
- Install the certificate into the Usage Meter appliance by following the procedure described in this document.