Configuring the HTTPS Certificate for auto-deployment


By default the MVMM Configuration Agent uses an HTTPS connection to retrieve deployment information. A certificate for that HTTPS server is included in a java key store if using an agent distribution of the MVMM Configuration Agent. It is stored in the file configuration/services/httpsTrustStore.jks, unless configured otherwise.

The key store should be updated if ...

  • The agent connects to a different host
  • The certificate is updated
  • The agent was not retrieved using agent distribution

To update the key store with a new HTTPS certificate, firstly make any other configuration changes (e.g. change the services host, or update the certificate on the service tier).

  • Stop the MVMM Configuration Agent.
  • Start the MVMM Configuration Agent in console mode.
  • Issue the storeHTTPSCertificate command
  • Respond to the prompts as appropriate
  • Exit the console mode, and restart the MVMM Configuration Agent.

See the following example session.

Information
Example

D:\test\agents\bmmtm_agent>bin\Agent.bat --console
--> Wrapper Started as Console
Launching a JVM...
Wrapper (Version 3.2.3) http://wrapper.tanukisoftware.org/
  Copyright 1999-2006 Tanuki Software, Inc.  All Rights Reserved.


osgi>
storeHTTPSCertificate
Requesting trust store from https://test.bmc.com:15004/
Printing Server certificate chain ...
Certificate[0]:
   Subject CN=test.bmc.com, OU=BMTMServices, OU=https, O=15004
   Issuer  CN=test.bmc.com, OU=BMTMServices, OU=https, O=15004
   Serial  60551321615506743260605600680113749147
   Valid   Mon Feb 17 15:10:29 GMT 2020 - Fri Feb 17 15:10:29 GMT 2045
   sha1    41 28 a6 41 29 ee 7f a8 dc e9 f5 96 b7 ca 4a 64 26 a0 95 7b
   md5     33 f0 48 8a 73 df c2 bf 33 9b ee 8a a9 30 58 12
Trust this server ? [no]:
yes
Hostname: test.bmc.com
Is this the expected host name ? [no]:
yes
Certificate saved in trust store

osgi>
exit
<-- Wrapper Stopped

Alternatively, the key store can be manipulated directly with the java keytool command (For example, to import certificates from other sources).

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

MainView Middleware Monitor 9.1