The system administrator can replace a self-signed certificate with one from a certificate authority. The same certificate can be used on multiple machines.

The labels for the private key and certificate chain headers and footers depend on the certificate authority in use. Information here is based on headers and footers for a certificate generated by openssl.

1

Navigate to the Identity Appliance management console by using its fully qualified domain name, https://identity-hostname.domain.name:5480/.

2

Log in with user name root and the password you specified when deploying the Identity Appliance.

3

Click the SSO tab.

4

Click SSL.

5

Select the certificate type from the Choose Action menu. If you are using a PEM encoded certificate, for example for a distributed environment, select Import PEM encoded certificate.

Certificates that you import must be trusted and must also be applicable to all instances of vCloud Automation Center Appliance and any load balancer by using Subject Alternative Name (SAN) certificates.

Option

Action

Import a certificate

a

Copy the certificate values from BEGIN PRIVATE KEY to END PRIVATE KEY, including the header and footer, and paste them in the RSA Private Key text box.

b

Copy the certificate values from BEGIN CERTIFICATE to END CERTIFICATE, including the header and footer, and paste them in the Certificate Chain text box.

c

(Optional) If your certificate has one, copy the pass phrase that encrypts the private key of the certificate that you are importing, and paste it in the Pass Phrase text box.

Generate a self-signed certificate

a

Type a common name for the certificate in the Common Name text box. You can use the fully qualified domain name of the virtual appliance (hostname.domain.name) or a wild card, such as *.mycompany.com. If you use a load balancer, you need to specify the FQDN of the load balancer or a wildcard that matches the name of the load balancer. Do not accept a default value if one is shown, unless it matches the host name of the virtual appliance.

b

Type your organization name, such as your company name, in the Organization text box.

c

Type your organizational unit, such as your department name or location, in the Organizational Unit text box.

d

Type a two-letter ISO 3166 country code, such as US, in the Country text box.

6

Click Replace Certificate, even if you are generating a new certificate.

After a few minutes the certificate details appear on the page. If you are using a load balancer, the certificate is for the load balancer.

The certificate is updated.