Implementing certificate deployment in TrueSight Operations Management using scripts


Security certificates play a significant role in securing the TrueSight Operations Management environment. You must create and apply a security certificate on your server to initiate a secure session with the browsers. After a successful implementation of the security certificate, you can observe that the HTTP changes to HTTPS format on your browser address bar, as shown in the following screenshot:

tls_cert_illustration.png

Deploying signed certificates in TrueSight Operations Management environment involves tasks such as creating a private key pair, generating a certificate signing request (CSR), sending the CSR to the Certificate Authority (CA) of your organization for signing, and importing the signed certificates into the component's keystores/truststores. Presentation Server and the Infrastructure Management server provides set of CLI commands that helps you as an administrator to deploy certificates easily and quickly. 

Important Information

The CLI commands to create and import certificates is supported only if you apply the Fix Pack 3 (11.0.00.003) on:

  • TrueSight Presentation Server 11.0
  • TrueSight Infrastructure Management server 11.0

For the other TrueSight Operation Management components, you can manually create and import signed certificates. For details, see Implementing private certificates in TrueSight Operations Management.

The following procedures guide you to create and import certificates for the following TrueSight Operations Management components using the CLI commands:

Component

For detailed steps, see:

Presentation Server

Infrastructure Management Server

Where to go from here

You can manually create and import signed certificates for the other TrueSight Operations Management components that don't have CLI commands to deploy signed certificates. For details, see Implementing-private-certificates-in-TrueSight-Operations-Management.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*