VMware Support Community
jpit
Contributor
Contributor
Jump to solution

Web cert about to expire on Skyline Collector

VMware Skyline Appliance - 3.1.0.0 Build 19303936

Have a self signed cert that is about to expire.

Unable to refresh the cert using the VMware KB article located here
https://docs.vmware.com/en/VMware-Skyline-Health-Diagnostics/services/Skyline-Health-Diagnostics/GUI...

I am SSH'd into the appliance using the root account

After running the "shd-config refreshcert" command I get the following error
-bash: shd-config: command not found


Am i missing a step in this somewhere?

It the shd-config command even valid?

Labels (1)
Reply
0 Kudos
1 Solution

Accepted Solutions
jpit
Contributor
Contributor
Jump to solution

Here is the full solution for changing the cert on the SKYLINE COLLECTOR VM

Run the following commands

openssl req -x509 -nodes -days 10220 -newkey rsa:2048 -keyout /tmp/nginx.key -out /tmp/nginx.crt -subj "/CN=Skyline/O=VMware Inc/OU=IT/C=US"


cp /tmp/nginx.crt /usr/local/skyline/ui/nginx-selfsigned.crt


cp /tmp/nginx.key /usr/local/skyline/ui/nginx-selfsigned.key


systemctl restart nginx.service

 

Open WINSCP

Download Files from tmp folder .key and .crt

Goto Skyline Collector WEBSITE

Upload the cert and key file

Under System\Web Server Certificate

Set Certificiate

Refresh Page

View solution in original post

Reply
0 Kudos
2 Replies
TrumanShow1
Contributor
Contributor
Jump to solution

Same issue here - cert set to expire on 7/29

 

Reply
0 Kudos
jpit
Contributor
Contributor
Jump to solution

Here is the full solution for changing the cert on the SKYLINE COLLECTOR VM

Run the following commands

openssl req -x509 -nodes -days 10220 -newkey rsa:2048 -keyout /tmp/nginx.key -out /tmp/nginx.crt -subj "/CN=Skyline/O=VMware Inc/OU=IT/C=US"


cp /tmp/nginx.crt /usr/local/skyline/ui/nginx-selfsigned.crt


cp /tmp/nginx.key /usr/local/skyline/ui/nginx-selfsigned.key


systemctl restart nginx.service

 

Open WINSCP

Download Files from tmp folder .key and .crt

Goto Skyline Collector WEBSITE

Upload the cert and key file

Under System\Web Server Certificate

Set Certificiate

Refresh Page

Reply
0 Kudos