To establish a trusted connection to the Skyline Collector instance in Region B, you replace the SSL certificate for the virtual appliance management interface (VAMI) with a custom certificate. The custom certificate is signed by the certificate authority available on the parent Active Directory or on the intermediate Active Directory.

Procedure

  1. Log in to the Windows Server host that you allocated for certificate generation.
  2. In the C:\CertGenVVD-version\SignedByMSCACerts folder, duplicate the files for the Skyline Collector instance generated by using the Certificate Generation Utility for VMware Validated Design under new file names.
    File Type Original File Name VVD 5.1 New File Name VVD 5.1.1 New File Name
    Certificate lax01sky01.2.chain.pem nginx-selfsigned.crt nginx.crt
    Key lax01sky01-orig.key nginx-selfsigned.key nginx.key
  3. Log in to the Skyline Collector appliance by using a Secure Shell (SSH) client.
    Setting Value
    FQDN lax01sky01.lax01.rainpole.local
    User name root
    Password skyline_root_password
  4. By using an scp software such as WinSCP, upload and overwrite the certificate and key files on the Skyline Collector appliance.
    • For VMware Validated Design 5.1, replace the nginx-selfsigned.crt and nginx-selfsigned.key files in the /usr/local/skyline/ui/ directory on the appliance.
    • For VMware Validated Design 5.1.1, replace the nginx.crt and nginx.key files in the /etc/nginx directory on the appliance.
  5. To update the certificate on the Skyline user interface, restart the Nginx service.
    1. Restart the Ngnix service by running this command.
      systemctl restart nginx
    2. Check the status of the Ngnix service by running this command .
      systemctl status nginx
  6. After you restart the services, verify that the certificate on the Skyline Collector user interface is updated.
    1. Close all Web browser windows.
    2. Open a Web browser and go to https://lax01sky01.lax01.rainpole.local.
    3. Verify that you see the new certificate in the Web browser.