Previous Topic: Review Interactions Between Huawei GalaX Management Components

Next Topic: Add a New GalaX Connection to the Manager

Administration Guide › Managing Virtual Environments › Huawei GalaX › How to Configure Huawei GalaX Management Components › Obtain the Administrator User p12 File

Obtain the Administrator User p12 File

To perform operations in the CA Server Automation UI, obtain the administrator user p12 file from the GalaX environment. The p12 file provides you administrator privileges to configure, monitor, and manage the GalaX environment.

The p12 certification file is generated during the GalaX installation. The certification file is globally unique and only valid for a specific Elastic Service Controller (ESC) API. You cannot use the file to access other GalaX ESC servers.

Before you perform the following procedure, verify the IP address of your GalaX ESC server and the password for the user root.

Follow these steps:

  1. Specify a password that you want to use for generating the p12 file.

    You also require this password when you configure the connection between the CA Server Automation manager and the GalaX ESC server.

  2. Log in the GalaX ESC server using root.
  3. Open a terminal window and run the following command: 
    cd /opt/eucalyptus/.euca

    This directory contains certification files.

  4. To get the names of the digit-signed certification file and private key certification file, run the ls command.

    The file names have the following format:

  5. Run the following command: 
    Openssl pcks12 -export -in <digit-signed certification file> -out admin.p12 -inkey <private key certification file>

    Example:

    openssl pkcs12 -export -in euca2-admin-109f9d47-cert.pem -out admin.p12 -inkey euca2-admin-109f9d47-pk.pem
  6. The system prompts you: "Enter Export Password"
  7. Enter the password that you have specified in Step 1.

    The system generates the required admin.p12 certification file in the /opt/eucalyptus/.euca directory.

  8. Copy the admin.p12 file to the server on which the CA Server Automation manager resides. The directory on the server can be arbitrary. You can use a tool like WinSCP to copy the admin.p12 file to that Windows system.
  9. The admin.p12 file and your password can now be used to establish a connection between the CA Server Automation manager and the GalaX ESC server.