Certificate Replacement. VMware Validated Design 4.0 VMware Validated Design for Remote Office Branch Office 4.0

Transcription

1 Certifite Replement VMwre Vlite Design 4.0 VMwre Vlite Design for Remote Offie Brnh Offie 4.0

2 Certifite Replement You n fin the most up-to-te tehnil oumenttion on the VMwre wesite t: If you hve omments out this oumenttion, sumit your feek to ofeek@vmwre.om VMwre, In Hillview Ave. Plo Alto, CA Copyright 2017 VMwre, In. All rights reserve. Copyright n tremrk informtion. VMwre, In. 2

3 Contents Aout VMwre Vlite Design Certifite Replement for Remote Offie n Brnh Offie 4 1 Crete n A Mirosoft Certifite Authority Templte in ROBO 5 2 Use the Certifite Genertion Utility to Generte CA-Signe Certifites for the SDDC Mngement Components in ROBO 7 3 Reple Certifites of the Mngement Prouts in ROBO 11 Reple the vcenter Server Certifite in ROBO 11 Reple the vcenter Server Certifite in ROBO 11 Reonnet vsphere Dt Protetion to vcenter Server After Certifite Replement in ROBO 14 Upte the vcenter Server Certifite on the Clou Mngement Pltform in ROBO 15 Upte the vcenter Server Certifite for ROBO on vrelize Opertions Mnger 16 Reple the NSX Mnger Certifite in ROBO 17 Instll CertGenVVD-Generte Certifite on vsphere Dt Protetion in ROBO 19 Reple the Certifite of vrelize Log Insight in ROBO 20 VMwre, In. 3

4 Aout VMwre Vlite Design Certifite Replement for Remote Offie n Brnh Offie VMwre Vlite Design Certifite Replement for VMwre Vlite Design Remote Offie n Brnh Offie provies step-y-step instrutions out repling ertifites on the mngement omponents of running remote offie n rnh offie (ROBO) whose esign extens VMwre Vlite Design for Softwre-Define Dt Center. The ertifite replement proess onsists of the following phses: 1 Otin ertifites for the mngement omponents tht re signe y ustom ertifite uthority (CA) Use the VMwre Vlite Design Certifite Genertion utility to utomtilly generte the ertifites for ll omponents. 2 Reple the ertifites in the live ROBO environment. Intene Auiene The VMwre Vlite Design Certifite Replement oumenttion is intene for lou rhitets, infrstruture ministrtors, lou ministrtors n lou opertors who re fmilir with n wnt to use VMwre softwre to eploy in short time n mnge n SDDC tht meets the requirements for pity, slility, kup n restore, n isster reovery. Require Softwre VMwre Vlite Design Certifite Replement is omplint n vlite with ertin prout versions. See VMwre Vlite Design Relese Notes for more informtion out supporte prout versions. VMwre, In. 4

5 Crete n A Mirosoft Certifite Authority Templte in ROBO 1 The first step in ertifite genertion n replement in the ROBO is setting up Mirosoft Certifite Authority templte through Remote Desktop Protool session. After you hve rete the new templte, you it to the ertifite templtes of the Mirosoft CA. Prerequisites This VMwre Vlite Design sets the CA up on oth Ative Diretory (AD) servers: CA Role Root CA Intermeite CA AD Server 01rpl.rinpole.lol 03rpl.rinpole.lol Both AD servers re running the Mirosoft Winows Server 2012 R2 operting system. Verify tht you instlle Mirosoft Server 2012 R2 with Ative Diretory Domin Servies enle. Verify tht the Certifite Authority Servie role n the Certifite Authority We Enrolment role is instlle n onfigure on the Ative Diretory Server. Verify tht 03rpl.rinpole.lol hs een set up to e the intermeite CA of the root CA 01rpl.rinpole.lol. Proeure 1 Use Remote Desktop Protool to onnet to the CA server 03rpl.rinpole.lol s the AD ministrtor with the _min_psswor psswor. 2 Clik Strt > Run, enter erttmpl.ms, n lik OK. 3 In the Certifite Templte Console, uner Templte Disply Nme, serh the list to see if you n fin templte with the nme vmwre exists 4 If templte with the nme vmwre lrey exists, go to Step In the Certifite Templte Console, uner Templte Disply Nme, right-lik We Server n lik Duplite Templte. 6 In the Duplite Templte winow, leve Winows Server 2003 Enterprise selete for kwr omptiility n lik OK. 7 In the Properties of New Templte ilog ox, lik the Generl t. VMwre, In. 5

6 Certifite Replement 8 In the Templte isply nme text ox, enter VMwre s the nme of the new templte. 9 Clik the Extensions t n speify the extensions informtion. e f Selet Applition Poliies n lik Eit. Selet Server Authentition, lik Remove, n lik OK. Selet Key Usge n lik Eit. Clik the Signture is proof of origin (nonrepuition) hek ox. Leve the efult for ll other options. Clik OK. 10 Clik the Sujet Nme t, ensure tht the Supply in the request option is selete, n lik OK to sve the templte. 11 To the new templte to your CA, lik Strt > Run, enter ertsrv.ms, n lik OK. 12 In the Certifition Authority winow, expn the left pne if it is ollpse. 13 Right-lik Certifite Templtes n selet New > Certifite Templte to Issue. 14 In the Enle Certifite Templtes ilog ox, selet the VMwre ertifite tht you just rete in the Nme olumn n lik OK. VMwre, In. 6

7 Use the Certifite Genertion Utility to Generte CA-Signe Certifites for the SDDC Mngement Components in ROBO 2 Use the VMwre Vlite Design Certifite Genertion Utility (CertGenVVD) to generte ertifites tht re signe y the Mirosoft ertifite uthority (MSCA) for ll mngement prout with single opertion. For informtion out the VMwre Vlite Design Certifite Genertion Utility, see VMwre Knowlege Bse rtile Prerequisites If you use n intermeite CA suh s 03rpl.rinpole.lol, mke sure the Winows host tht you use to onnet to the t enter is prt of the rinpole.lol omin. Proeure 1 Log in to Winows host tht hs ess to your t enter. 2 Downlo the CertGenVVD-version.zip file of the Certifite Genertion Utility from VMwre Knowlege Bse rtile on the Winows host where you onnet to the t enter n extrt the ZIP file to the C: rive. 3 In the C:\CertGenVVD-version foler, open the efult.txt file in text eitor. 4 Verify tht following properties re onfigure. ORG=Rinpole In. OU=Rinpole.lol LOC=NYC ST=NY CC=US CN=VMwre_VVD keysize= Verify tht only the :\CertGenVVD-version\ConfigFiles foler ontins only following files. ny01esx01.txt ny01esx02.txt ny01esx03.txt ny01esx04.txt VMwre, In. 7

8 Certifite Replement ny01v01.txt ny01nsxm01.txt ny01vp01.txt ny01vrli01.txt VMwre, In. 8

9 Certifite Replement 6 If ny of the files oes not exist, rete it so tht you n generte the require ertifites for the ROBO. Crete new file in text eitor, the following properties re onfigure n sve it s ny01esx01.txt. ny01esx01.txt [CERT] NAME=efult ORG=efult OU=efult LOC=efult ST=efult CC=efult CN=ny01esx01.rinpole.lol keysize=efult [SAN] ny01esx01 ny01esx01.rinpole.lol Repet the steps for eh of the missing onfigurtion files. ny01esx02.txt ny01esx03.txt ny01esx04.txt [CERT] NAME=efult ORG=efult OU=efult LOC=efult ST=efult CC=efult CN=ny01esx02.rinpole.lol keysize=efult [SAN] ny01esx02 ny01esx02.rinpole.lol [CERT] NAME=efult ORG=efult OU=efult LOC=efult ST=efult CC=efult CN=ny01esx03.rinpole.lol keysize=efult [SAN] ny01esx03 ny01esx03.rinpole.lol [CERT] NAME=efult ORG=efult OU=efult LOC=efult ST=efult CC=efult CN=ny01esx04.rinpole.lol keysize=efult [SAN] ny01esx04 ny01esx04.rinpole.lol ny01v01.txt ny01nsxm01.txt ny01vp01.txt [CERT] NAME=efult ORG=efult OU=efult LOC=efult ST=efult CC=efult CN=ny01v01.rinpole.lol keysize=efult [SAN] ny01v01 ny01v01.rinpole.lol [CERT] NAME=efult ORG=efult OU=efult LOC=efult ST=efult CC=efult CN=ny01nsxm01.rinpole.lol keysize=efult [SAN] ny01nsxm01 ny01nsxm01.rinpole.lol [CERT] NAME=efult ORG=efult OU=efult LOC=efult ST=efult CC=efult CN=ny01vp01.rinpole.lol keysize=efult [SAN] ny01vp01 ny01vp01.rinpole.lol VMwre, In. 9

10 Certifite Replement ny01vrli01.txt [CERT] NAME=efult ORG=efult OU=efult LOC=efult ST=efult CC=efult CN=ny01vrli01-luster01.rinpole.lol keysize=efult [SAN] ny01vrli01-luster01 ny01vrli01 ny01vrli02 ny01vrli03 ny01vrli01-luster01.rinpole.lol ny01vrli01.rinpole.lol ny01vrli02.rinpole.lol ny01vrli03.rinpole.lol 7 Open Winows PowerShell prompt n nvigte to the CertGenVVD-version foler. For exmple, of you use CertGenVVD 2.1, nvigte to the following foler: C:\CertGenVVD Run the following ommn to grnt PowerShell permissions to run thir-prty shell sripts. Set-ExeutionPoliy Unrestrite 9 Run the following ommn to vlite prerequisites for running the utility. Verify tht VMwre is inlue in the ville CA Templte Poliy..\CertgenVVD-2.1.ps1 -vlite 10 Run the following ommn to generte MSCA-signe ertifites..\certgenvvd-2.1.ps1 -MSCASigne -ttri 'CertifiteTemplte:VMwre' 11 In the :\CertGenVVD-version foler, verify tht the utility rete the SigneByMSCACerts sufoler. VMwre, In. 10

11 Reple Certifites of the 3 Mngement Prouts in ROBO After you generte ertifite for mngement prout in the ROBO tht is signe y the ertifite uthority on the prent AD server in the region, reple the efult ertifite or n expire ertifite with newly-signe one on the prout instne in the ROBO. This hpter inlues the following topis: Reple the vcenter Server Certifite in ROBO Reple the NSX Mnger Certifite in ROBO Instll CertGenVVD-Generte Certifite on vsphere Dt Protetion in ROBO Reple the Certifite of vrelize Log Insight in ROBO Reple the vcenter Server Certifite in ROBO Reple the ertifites on the ROBO vcenter Server n reonnet it to the other mngement omponents in the remote offie to upte the new ertifite on these omponents. Reple the vcenter Server Certifite in ROBO You reple the mhine SSL ertifite on the vcenter Server instne in the ROBO with ustom ertifite tht is signe y the ertifite uthority (CA). Tle 3 1. Certifite-Relte Files on Pltform Servies Controllers vsphere vcenter Server Certifite File Nme ny01v01.rinpole.lol ny01v01.key ny01v01.3.pem (CertGenVVD) hinroot64.er VMwre, In. 11

12 Certifite Replement Proeure 1 Disonnet the NSX Mnger from the emee Pltform Servies Controller on the vcenter Server instne in the ROBO temporrily. Open We Browser n go to Log in using the following reentils User nme Psswor Vlue min nsx_mnger_min_psswor Clik Mnge vcenter Registrtion Clik the Unonfigure utton next to Lookup Servie URL. 2 Log in to the vcenter Server ppline y using Seure Shell (SSH) lient. Open n SSH onnetion to ny01v01.rinpole.lol. Log in using the following reentils. Usernme Psswor Vlue root v_root_psswor 3 Chnge the vcenter Server ommn shell to the Bsh shell so tht you n use seure opy sp onnetions. shell hsh -s /in/sh root 4 Copy the generte ertifite files ny01v01.key, ny01v01.3.pem n hinroot64.er from the Winows host to the /tmp/ssl iretory on the vcenter Server Appline. Use sp, FileZill or WinSCP to opy the files. 5 Renme ny01v01.3.pem to ny01v01.1.hin.er. 6 A the root ertifite to the VMwre Enpoint Certifite Store s truste root ertifite using following ommn. Enter the vcenter Single Sign-On psswor when prompte. /usr/li/vmwre-vmf/in/ir-li trusteert pulish --hin --ert /tmp/ssl/hinroot64.er VMwre, In. 12

13 Certifite Replement 7 Reple the ertifite on vcenter Server. Strt the vsphere Certifite Mnger utility on vcenter Server. /usr/li/vmwre-vm/in/ertifite-mnger e f g Selet Option 1 (Reple Mhine SSL ertifite with Custom Certifite) Enter efult vcenter Single Sign-On user nme ministrtor@vsphere.lol n the vsphere_min_psswor psswor. Selet Option 2 (Import ustom ertifite(s) n key(s) to reple existing Mhine SSL ertifite). When prompte for the ustom ertifite, enter /tmp/ssl/ny01v01.1.hin.er. When prompte for the ustom key, enter /tmp/ssl/ny01v01.key. When prompte for the signing ertifite, enter /tmp/ssl/hinroot64.er. h When prompte to ontinue opertion, enter Y. i Wit until the vcenter Server servies restrt suessfully. 8 Vlite tht the new ertifite hs een instlle suessfully. Open We Browser n go to Verify tht the We rowser shows the new ertifite. 9 Restrt the VAMI servie to upte ertifite for the ppline mngement interfe. Go k to the ny01v01.rinpole.lol SSH terminl. Enter the following ommn to upte ertifite for the ppline mngement interfe. /et/init./vmi-lighttp restrt 10 Swith the ommn shell k to the ppline shell. hsh -s /in/pplinesh root 11 If you pln to keep the ertifite of the NSX Mnger unhnge fter you reple the ertifite of vcenter Server, reonnet the NSX Mnger instne to vcenter Server. Open We Browser n go to Log in using the following reentils User nme Psswor Vlue min nsx_mnger_min_psswor Clik Mnge vcenter Registrtion VMwre, In. 13

14 Certifite Replement e Uner Lookup Servie, lik Eit. In the Lookup Servie ilog ox, enter the following settings n lik OK. Lookup Servie IP Vlue ny01v01.rinpole.lol Lookup Servie Port 443 SSO Aministrtor User nme Psswor ministrtor@vsphere.lol vsphere_min_psswor f g h In the Trust Certifite? ilog ox, lik Yes. Uner vcenter Server, lik Eit. In the vcenter Server ilog ox, enter the following settings, n lik OK. vcenter Server vcenter User nme Psswor Vlue ny01v01.rinpole.lol sv-nsxmnger@rinpole.lol sv-nsxmnger_psswor i j In the Trust Certifite? ilog ox, lik Yes. Wit for the Sttus initors for the Lookup Servie n vcenter Server to hnge to the Connete sttus. Reonnet vsphere Dt Protetion to vcenter Server After Certifite Replement in ROBO After you reple the ertifites on the vcenter Server noe in the ROBO, onnet vsphere Dt Protetion to the Mngement vcenter Server to upte the vcenter Server ertifite on vsphere Dt Protetion. Proeure 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 On the vsphere We Client Home pge, lik the VDP ion. 3 On the Welome to vsphere Dt Protetion pge, selet ny01vp01 from the VDP Appline rop-own menu n lik Connet. VMwre, In. 14

15 Certifite Replement Upte the vcenter Server Certifite on the Clou Mngement Pltform in ROBO After you reple the ertifites on the vcenter Server instne in the ROBO, reonnet vrelize Orhestrtor to vcenter Server. Proeure 1 Reonnet vrelize Orhestrtor to vcenter Server. Open We rowser n go to Clik Strt Orhestrtor Client. On the VMwre vrelize Orhestrtor login pge, log in to the vrelize Orhestrtor Host A y using the following host nme n reentils. Host nme User nme Psswor Vlue vr01vro01.rinpole.lol:8281 sv-vr sv-vr-psswor e f g h In the left pne, lik Workflows, n nvigte to Lirry > vcenter > Configurtion. Right-lik the Upte vcenter Server instne workflow n lik Strt Workflow. From the vcenter Server instne rop-own menu, selet 443/sk n lik Next. Enter the psswor for the sv-vro@rinpole.lol user ount n lik Sumit. Clik Yes to ignore the ertifite wrnings n lik Next. 2 Reonnet vrelize Business with vcenter Server. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue root vr_olletor_root_psswor e f Clik Mnge Privte Clou Connetions, selet vcenter Server, selet the ny01v01.rinpole.lol entry n lik the Eit ion. In the Eit vcenter Server Connetion ilog ox, enter the psswor for the svvr@rinpole.lol user n lik Sve. In the SSL Certifite wrning ilog ox, lik Instll. In the Suess ilog ox, lik OK. VMwre, In. 15

16 Certifite Replement 3 Reonnet the vsphere enpoint in vrelize Automtion. Open We rowser n go to Log in using the following reentils. User nme Psswor Domin Vlue it-tenntmin it-tenntmin_psswor rinpole.lol Nvigte to Infrstruture > Enpoints > Creentils, selet ny01v01 min n lik Eit. On the Creentils pge, enter the psswor for the vrelize Automtion reentil for the ministrtor of ny01v01.rinpole.lol, n lik Sve. Nme Desription User Nme Psswor Vlue ny01v01 min Aministrtor of ny01v01.rinpole.lol sv-vr@rinpole.lol sv_vr_psswor e f g h Nvigte to Infrstruture > Enpoints > Enpoints. Hve your mouse over ny01v01.rinpole.lol n lik Eit from the menu. On the Eit Enopint - vsphere (vcenter) pge, lik OK. A ertifite wrning shoul popup, lik OK to ept the new ertifite Upte the vcenter Server Certifite for ROBO on vrelize Opertions Mnger After you hnge the ertifite of the vcenter Server instne in the ROBO, upte the ertifite on the onnete vrelize Opertions Mnger in the hu y reonneting the vcenter Apter instne for the ROBO vcenter Server. Proeure 1 Log in to vrelize Opertions Mnger y using the ministrtion onsole. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue min vrops_min_psswor 2 In the left pne of vrelize Opertions Mnger, lik Aministrtion n lik Certifites. VMwre, In. 16

17 Certifite Replement 3 Selet the row tht ontins CN=ny01v01.rinpole.lol n lik the Delete ion. 4 In the left pne of vrelize Opertions Mnger, lik Aministrtion n lik Solutions. 5 Selet the VMwre vsphere solution n lik Configure. 6 In the Mnge Solutions ilog ox, selet ny01v01, lik Test Connetion, ept the new ertifite of the ROBO vcenter Server n lik Sve s. Reple the NSX Mnger Certifite in ROBO After you reple the ertifite of the vcenter Server instne in the ROBO, reple the ertifite of NSX Mnger. Tle 3 2. Certifite-Relte Files on the NSX Mnger Instne in ROBO NSX Mnger FQDN Certifite File Nme Replement Time ny01nsxm01.rinpole.lol ny01nsxm01.4.p12 from the CertGenVVD tool After you reple the ertifite on the vsphere vcenter Server Proeure 1 On the Winows host tht hs ess to the t enter, log in to the NSX Mnger We interfe. Open We rowser n go Log in using the following reentils User nme Psswor Vlue min nsx_mnger_min_psswor 2 Clik the Mnge Appline s utton. 3 On the Mnge t, lik SSL Certifites n lik Uplo PKCS#12 Keystore. 4 Browse to the ertifite hin file, provie the keystore psswor or pssphrse n lik Import. 5 Restrt the NSX Mnger to propgte the CA-signe ertifite. In the right orner of the NSX Mnger pge, lik the s ion. From the rop-own menu, selet Reoot Appline. VMwre, In. 17

18 Certifite Replement 6 Re-register the NSX Mnger to the ROBO vcenter Server. Open We rowser n go to the NSX Mnger We interfe Log in using the following reentils. User nme Psswor Vlue min nsx_mnger_min_psswor e Clik Mnge vcenter Registrtion. Uner Lookup Servie, lik the Eit utton. In the Lookup Servie ilog ox, enter the following settings, n lik OK. Lookup Servie IP Vlue ny01v01.rinpole.lol Lookup Servie Port 443 SSO Aministrtor User Nme Psswor ministrtor@vsphere.lol vsphere_min_psswor f g h In the Trust Certifite? ilog ox, lik Yes. Uner vcenter Server, lik the Eit utton. In the vcenter Server ilog ox, enter the following settings, n lik OK. vcenter Server vcenter User Nme Psswor Vlue for the NSX Mnger for the ROBO Cluster ny01v01.rinpole.lol sv-nsxmnger@rinpole.lol sv-nsxmnger_psswor i j In the Trust Certifite? ilog ox, lik Yes. Wit until the Sttus initors for the Lookup Servie n vcenter Server hnge to Connete. 7 Reonnet the NSX Mnger instne to vrelize Opertions Mnger. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue min vrops_min_psswor In the left pne of vrelize Opertions Mnger, lik Aministrtion n lik Certifites. Selet the row tht ontins CN=ny01nsxm01.rinpole.lol n lik the Delete ion. VMwre, In. 18

19 Certifite Replement e f g h In the left pne of vrelize Opertions Mnger, lik Aministrtion n lik Solutions. From the solution tle on the Solutions pge, selet the Mngement Pk for NSX-vSphere solution, n lik the Configure ion t the top. In the Mnge Solutions ilog ox, from the Apter Type tle t the top, selet NSXvSphere Apter. Clik the ny01nsxm01 pter instne, lik Test Connetion, ept the new ertifite n lik Sve settings. 8 Restrt vrops remote olletor noes to upte the nsx ertifition hnges. Open We rowser n go to Log in using the following reentils. vcenter User Nme Psswor Vlue v_min_user_nme v_min_psswor e f From Home selet Hosts n Clusters Expns NYC01-MGMT omputer resoures Right lik on ny01rmtol01 n selet Power -> Guest OS restrt Right lik on ny01rmtol02 n selet Power -> Guest OS restrt Instll CertGenVVD-Generte Certifite on vsphere Dt Protetion in ROBO After you use the VMwre Vlite Design Certifite Genertion Utility (CertGenVVD) to generte ertifites for the SDDC mngement omponents, reple the efult VMwre-signe ertifite on vsphere Dt Protetion in the ROBO with the ertifite tht is generte y CertGenVVD. Proeure 1 Copy the.keystore file tht CertGenVVD tool generte to the /root foler on the vsphere Dt Protetion virtul ppline. You n use sp, FileZill or WinSCP. 2 Log in to the vsphere Dt Protetion ppline. Open SSH onnetion to the virtul mhine ny01vp01.rinpole.lol. Log in using the following reentils. User nme Psswor Vlue root vp_root_psswor VMwre, In. 19

20 Certifite Replement 3 Restrt ll vsphere Dt Protetion servies y running the following ommns. pntl stop ll pntl strt ll 4 Run the Fingerprint.sh sript to upte the vsphere Dt Protetion server thumprint isplye in the VM onsole welome sreen. /usr/lol/vmr/in/fingerprint.sh Reple the Certifite of vrelize Log Insight in ROBO After you generte the PEM ertifite hin file tht ontins the own ertifite, the signer ertifite n the privte key file, uplo the ertifite hin to vrelize Log Insight in the ROBO. Proeure 1 Log in to the vrelize Log Insight user interfe. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue min vrli_min_psswor 2 In the vrelize Log Insight UI, lik the onfigurtion rop-own menu ion n selet Aministrtion. 3 Uner Configurtion, lik SSL. 4 On the SSL Configurtion pge, next to New Certifite File (PEM formt) lik Choose File, rowse to the lotion of the vrli.ny01.2.hin.pem file on your omputer, n lik Sve. The ertifite is uploe to vrelize Log Insight. VMwre, In. 20

21 Certifite Replement 5 Import the ertifite into the Jv Keystore on eh vrelize Log Insight noe. Open n SSH session n go eh of the vrelize Log Insight noes. Nme ny01vrli01.rinpole.lol Role Mster noe ny01vrli02.rinpole.lol Worker noe 1 ny01vrli03.rinpole.lol Worker noe 2 Log in using the following reentils. User nme Psswor Vlue root vrli_root_psswor Convert the on-isk vrli.ny01.2.hin.pem file in to vrli.ny01.2.hin.rt file. openssl x509 -in /root/vrli.ny01.2.hin.pem -inform PEM -out /root/vrli.ny01.2.hin.rt Import the vrli.ny01.2.hin.rt in to the Jv keystore. /usr/jv/efult/li/seurity/../../in/keytool -import -lis loginsight -file /root/vrli.ny01.2.hin.rt -keystore erts e f g When prompte for keystore psswor, type hngeit. When prompte to ept the ertifite, type yes. Repet this opertion on ll vrelize Log Insight noes until omplete. 6 In We rowser, go to A wrning messge tht the onnetion is not truste ppers. 7 To review the ertifite, lik the plok ion in the ress r of the rowser, n verify tht the Sujet Alterntive Nme ontins the nmes of the vrelize Log Insight luster noes. 8 Import the ertifite in your We rowser. For exmple, in Google Chrome uner the HTTPS/TLS settings lik the Mnge ertifites utton, n in the Certifites ilog ox import vrli.ny01.2.hin.pem. You n lso use Certifite Mnger on Winows or Keyhin Aess on MAC OS X. VMwre, In. 21