How to install SSL Certificte on VCLOUD

                                                                SSL installation on VCloud

1. Connect to VCLoud server as SSH root.

2. Copy .key and .crt files to /opt

3. VCloud requires to SSL certificate. One for Web Interface – called “http” and other for console  - called “consoleproxy” . For this we have to convert both keys to pkcs12 format files. Run the next command:
#> openssl pkcs12 -export -name consoleproxy -in /root/filename.crt -inkey /root/filename.key -out /root/keyconsole.p12
#> openssl pkcs12 -export -name http -in /root/filename.crt -inkey /root/filename.key -out /root/keyhttp.p12

Where “filename” is the name of the actual files. When asked for password, fill something simple like 123456.

1. Next step is to import converted keys into keystore. Keystore is the file where Java keeps keys for the application and every key has its alias name. In this case one alias for “http” and other for “consoleproxy”.

#> /opt/vmware/vcloud-director/jre/bin/keytool -importkeystore -destkeystore certificates_year.ks -storetype JCEKS -srckeystore /root/ keyconsole.p12 -srcstoretype pkcs12 -alias consoleproxy

#> /opt/vmware/vcloud-director/jre/bin/keytool -importkeystore -destkeystore certificates_year.ks -storetype JCEKS -srckeystore /root/keystore.p12 -srcstoretype pkcs12 -alias http

1. Now we have keystore to replace the old one. The replacement process is simple enough: close vdirector service, reconfigure it, and restart.

#> service vmware-vcd stop

#> /opt/vmware/vcloud-director/bin/configure

Fill passwords used in convertions.

When application asks to restart VCloud, say yes.