How do I create a Job that sends out a SSL certificate to the network of SG appliances?


<< Back to Knowledge Search

Solution

Overview

Can the Director push out SSL certs to SG applainces??

Can I create a overlay file, on my Director appliance, that periodically updates my SG appliances with new certificates?

Cause
Resolution

NOTE: This article assumes you understand how to configure your Director appliance.  More specifically, we expect you to understand how to configure an overlay file in DIrector.  For more details on overlay files, see 000010276

Creating the overlay:

To create a overlay that requests a db update for all your SG BCWF databases, follow these steps:

  • Login to your Director appliance using the admin credentials.
  • Click on the Configure tab.
  • On the right hand side, choose 'overlay' on the drop down list , under the title called Configuration library.
  • Right click on the title All and choose New overlay.
  • On the top right, give this overlay a name such as 'SSL Certificates".
  • Click on the radio button that is called Using Cli
  • Cut and past the below cli commands into the this window.
  • TIP: Using, of course, your own certificate name and certificate.

ssl
inline ca-certificate <Certificate-name>e eof
-----BEGIN CERTIFICATE-----
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
-----END CERTIFICATE-----
eof

  • Press the button called OK.
  • TIP: To ensure the paste worked, you can use the view button.  You should see no white spaces, or lines, before the text 'config t'.
  • Press the button called OK.

Testing the overlay:

To test this overlay file out, follow these steps.

  • While logged into your DIrector appliance, click on the Configuration tab.
  • Select a test SG appliance in the list.
  • Select the overlay file you just created above, and press the right mouse button.
  • Choose the Execute option.
  • Answer yes, at the prompt, to send to this overlay to this test SG.
  • If the the resulting screen contains no errors, the overlay was successfully configured.

Scheduling the overlay, and pushing the overlay out on mass:

To schedule this overlay file to be sent out periodicly, follow these steps.

  • While logged into your DIrector appliance, click on the Jobs tab.
  • Ensure the config Jobs option is selected on the right hand side, and click New Config Job.
  • Give the Job a name such as "Scheduling your SSL updates".
  • Select the actions tab, and then press "New"  ( see the bottom left of the screen).
  • On the drop down menu, select the option called Push overlay.
  • In the next drop down menu, under this one,  select the overlay you created above.
  • Push the button to select your SG appliances to send this job too.
  • Select a SG appliance(s) to send this overlay to. In this screen you can choose a group of them.
  • Ensure you press the button 'apply' or the changes will be lost when you exit.
  • If you want to schedule this job, click on the schedule tab now.
  • If you want this job executed once, choose the date here, and press the plus button to enter the date into the scheduling database.
  • If you want this job executed at regular intervals chose the radio button "This is a recurring job to be executed on" 
  • Choose the days and time you want this to execute on, and press the 'plus' button to enter this into the scheduling database.
  • Be sure to press 'ok' at the bottom right of this screen to have this job saved.
  • TIP: To test this job prior to the scheduled date, right click on the job, and press 'execute'.

LInks to other articles:

For more details on updateing your SSL certificate on your SG appliance, see 000011764

For details on sending out a BCWF update request, using an overlay, see 000010251

For details on what other types of configuration jobs are availabe on Director, see 000010276

If you are having trouble registering your SG appliances, see 000015497

Workaround
Additional Information
Bug Number
InQuira Doc IdKB4792
Attachment

Article Feedback

Hide Properties
First Published      10/01/2014
Last Modified      10/01/2014
Last Published      10/01/2014
Article Audience
Product      Director 510
Software      SGME 5.5
Topic      CachePulse, Configuration / WUI / CLI, Director Jobs
Article Number      000010265
Summary     
Was this helpful?
Comments:
 
Previous MonthNext Month
SunMonTueWedThuFriSat