Creating CSR for Skyline Web SSL Cert.

[Chip101]

Hello Everyone,

First time posting and hoping someone can help.  I'm trying to create a CSR (Certificate Signing Request) on our Slyline Appliance v3.1.0.0 Build 19303936 but an having issues creating the CSR itself.  I'm following the instructions in the below vmware skyline doc but am getting stuck at step 6 when trying to copy the conf file. 

https://docs.vmware.com/en/VMware-Skyline-Health-Diagnostics/services/Skyline-Health-Diagnostics/GUI...

As shown in the attached image file, there is no /opt/vmware-shd/ directory so the command in step 6 does not work as the file it is looking for is in a location that does not exist.  Although I can get by, I'm not eperienced enough with linux/photon OS to know if the config file its looking for may be located somewhere else.

I've originally tried to do this using the skyline web interface by following the vmware skyline doc in the next link below.  But can't see anything to create the CRS from the there in the Web GUI and it just askes for two files (the Certificate and the key) which I'm not sure how to get without creating a CRS first for our internal Microsoft CA to issue a them.

https://docs.vmware.com/en/VMware-Skyline-Collector/3.1/user-guide/GUID-B22AB0B3-428F-423D-BEE7-A6CF...

Any help would be appreciated and thank you in advance.

Chip

[Chip101 · Accepted solution]

I was able to figure this out.  Since the folder/file the link mentions for the conf file does not exist on the skyline server, I ended up creating the config file from scratch as per the following link that shows the required format for the conf file.

https://geekflare.com/san-ssl-certificate/

Hope this helps someone else.

Chip

[KaramjotSingh]

The file location is updated and is available at

/opt/vmware/etc/ssl/openssl.conf

Contents of the file are:

[req]
distinguished_name=user_dn
x509_extensions=v3_req
prompt=no

[user_dn]
commonName=Skyline
organizationName=VMware Inc
organizationalUnitName=IT
countryName=US

[v3_req]
# Extensions to add to a certificate request
subjectAltName = @alt_names
basicConstraints=CA:TRUE
basicConstraints=critical,CA:TRUE, pathlen:0

[alt_names]
DNS.1 = localhost