Previous Topic: Metering Gateway Installation and ConfigurationNext Topic: Metering Server Commands Overview

Metering Gateway Installation and Configuration › Client-side SSL Certificate Setup

Client-side SSL Certificate Setup

To setup the SSL certificate that MGT uses to authenticate itself with CA's metering system, login to the MGT application (app login MGT). Upon logging into the application, you are presented with the following simple text menu used to manage the SSL certificate that is used to communicate with CA's metering system: 

Metering Gateway SSL Certificate Management Utility - version 1.0.0
Copyright 2006-2008 3Tera Inc.
   A. Create new SSL certificate
   B. Delete current SSL certificate
   C. Display current SSL certificate
   D. Test notifications
   Q. Exit

   Please enter selection -->

The 'Create new SSL certificate' menu option generates a new SSL certificate. If an SSL certificate already exists, the user is prompted before deleting the existing certificate and generating a new one. Upon successful certificate creation, the certificate signature request is displayed and the user is instructed to e-mail the certificate signature request to CA so that the certificate can be signed. The signed certificate is to be installed on the data volume, see Installing SSL Certificate for instructions on how to copy the signed certificate to the data volume.

The 'Delete current SSL certificate' menu option deletes the SSL certificate for the account.

The 'Display current SSL certificate' menu option displays either the signed SSL certificate or the certificate signature request. If the certificate has already been signed, the signed certificate is displayed. If the certificate has not been signed, the certificate signature request is displayed and the user is instructed to e-mail the certificate signature request to CA so that the certificate can be signed.

The 'Test notifications' menu option verifies that a message can be written to the dashboard of the grid controller. The user is prompted to verify that the dashboard displays the message and that any recipients of email notifications received the email from the grid controller.

Installing SSL Certificate

Follow these steps to install a signed SSL certificate from CA on the Metering Gateway.

  1. Start the Metering Gateway application. A message should be logged to the grid dashboard specifying the SSL certificate is missing.
  2. Login into the MGT application and create the SSL certificate (That is, select the Create new SSL certificate option).
  3. Copy and paste the displayed certificate signature request into an e-mail and send it to CA technical support.
  4. When CA technical support replies with the signed certificate, save the certificate to your local machine.
  5. As a grid user (not an administrator), scp the certificate to the data volume from your local machine: 
    scp <signed SSL certificate file> <grid IP>:/app/mgt/data/mnt/data/ssl/mgt.cert
  6. Verify the signed SSL certificate has been copied by logging into the MGT application and selecting the Display current SSL certificate menu option.
  7. Restart the mgt appliance: 
    comp restart MGT:main.mgt
  8. Verify no error messages are logged to the grid dashboard. If there are error messages, please contact CA technical support.
Configuring Grids to Use the Metering Gateway

For grids to report their metering data to the MGT application, perform the following for new grids:

update the account_srv parameter in the default.conf file of the CA 3Tera AppLogic distro to the IP address specified by the in_ip property.