Creating, exporting, and loading a self-signed server certificate

You need a self-signed server certificate file while adding an Azure account for monitoring in BMC PATROL for Windows Azure. You can either use an existing file or create your own certificate file. For information about adding an Azure account for monitoring, see Adding Azure accounts.

To create a self-signed server certificate

1. Select Start > Control Panel > Administrative Tools.
2. In the Administrative Tools window, double-click Internet Information Services (IIS) Manager.
3. Double-click the host name in the Recent Connections area.
4. In the Features view tab, double-click the Server Certificates icon.
5. In the Actions pane, click Create Self-Signed Certificate.
6. On the Specify Friendly Name page, enter a name for the certificate in the Specify a friendly name for the certificate text box.
7. Click OK.
   The certificate is added in the Server Certificate folder with the friendly name.

After you create a self-signed certificate, you need to export the certificate in the .pfx format. The .pfx format certificate is required while configuring the Azure account in BMC PATROL for Windows Azure.

To export the certificate in the .pfx format

1. In the Server Certificates folder, right-click the certificate you want to export and select Export.
2. In the Export Certificate dialog box, in the Export to text box, enter the name of the certificate with extension (.pfx), to which you want to export the certificate.
3. Enter the password for the certificate.

   Note

   You need to enter the same password while configuring an Azure account for monitoring.

4. Confirm the password for the certificate.
5. Click OK.

After you create the certificate, you need to upload the certificate on Windows Azure management portal in the .cer format.

To export the certificate in the .cer format

1. Click Start > Run.
2. Type certmgr.msc.
3. Select Trusted Root Certification Authorities > Certificates.
4. In the Friendly Name column, right-click the certificate that you want to export in .cer format and select All Tasks > Export.
5. In the Welcome to Certificate Export Wizard page, click Next.
6. In the Export Private Key page, select the No, do not export the private key option, and click Next.
7. Accept the default option (DER encoded binary X.509 (.CER)), and click Next.
8. In the File to Export page, specify the name of file to which you want to export the certificate, and click Next.
9. In the Completing the Certificate Export Wizard page, click Finish.

To upload the certificate to Windows Azure

1. Log on to Windows Azure.
2. Click the Management Certificates link.
3. Click Add Certificate.
4. In the Add New Management Certificate dialog box, from the Choose a Subscription list, select an Azure subscription.
5. In the Certificate file text box, browse to the self-signed certificate location (with .cer extension) and click OK.