You can generate a self-signed certificate for a vRealize Log Insight Windows or Linux agent by using the OpenSSL tool.

Prerequisites

Download the appropriate installer for OpenSSL from https://www.openssl.org/community/binaries.html. Use the downloaded OpenSSL installer to install it on Windows.

Procedure

  1. Create a certificate folder in the path mentioned for ssl_ca_path in the liagent.ini file.
  2. Open the Command Prompt and run the following command.
    /etc/pki/tls/certs/ > openssl req -newkey rsa:2048 -new -nodes -x509 -days 3650 -keyout key.pem -out ca.pem

    OpenSSL prompts you to supply certificate properties, including country, organization, and so on.

Results

Two files are created, key.pem and ca.pem.

  • key.pem is the private key.
  • ca.pem is a certificate signed by key.pem.