6.4

3
Use the keytool utility with the -selfcert option to generate a new self-signed certicate for the
vRealize Operations for Published Applications adapter.
Because the default self-signed certicate is issued to VMware, you must generate a new self-signed
certicate before you can request a signed certicate. The signed certicate must be issued to your
organization.
For example:
keytool –selfcert –alias v4pa-adapter –dname dn-of-org –keystore v4pa-adapter.jks
dn-of-org is the distinguished name of the organization to which the certicate is issued, for example,
"OU=Management Platform, O=VMware, Inc., C=US".
By default, the certicate signature uses the SHA1withRSA algorithm. You can override this default by
specifying the name of the algorithm with the -sigalg option.
4
Use the keytool utility with the -certreq option from the adapter work directory to generate a
certicate signing request.
A certicate signing request is required to request a certicate from a certicate signing authority.
For example:
keytool –certreq –alias v4pa-adapter –file certificate-request-file -keystore v4pa-
adapter.jks
certicate-request-le is the name of the le that will contain the certicate signing request.
5 Upload the certicate signing request to a certicate authority and request a signed certicate.
If the certicate authority requests a password for the certicate private key, use the password
congured for the certicate store.
The certicate authority returns a signed certicate.
6 To import the certicate, copy the certicate le to the vRealize Operations for Published Applications
adapter work directory and run the keytool utility with the –import option.
For example:
keytool –import –alias v4pa-adapter –file certificate-filename -keystore v4pa-adapter.jks
certicate-lename is the name of the certicate le from the certicate authority.
When the keytool utility is nished, the signed certicate is imported to the adapter certicate store.
7 To start using the new certicate, restart the vRealize Operations for Published Applications adapter on
the node where the adapter is running.
Platform Action
Linux
Run the service vmware-vcops restart command.
Windows
Use the Windows Services tool (services.msc) to restart the
vRealize Operations for Published Applications Adapter service.
What to do next
After you restart the vRealize Operations for Published Applications adapter, you must pair any broker
agents that are aached to the vRealize Operations for Published Applications adapter. See Chapter 13,
“Certicate Pairing,” on page 63.
VMware vRealize Operations for Published Applications Installation and Administration
60 VMware, Inc.