topic Re: Practical Way to Upload Root Certificate on every host running OA Extension in Extensions

Practical Way to Upload Root Certificate on every host running OA Extension

yuesong_teh — Wed, 12 Jun 2024 07:17:22 GMT

Hi All,

Wondering is there any more practical way for us to handle the root certificate requirement for every host with if let say we are going to use custom built OA extension?

https://docs.dynatrace.com/docs/shortlink/sign-extension#local-extensions

Imagine we have 1000 hosts, it seems impractical for us to go into every host to upload the root certificate though 😂😂(hopefully I didn't missed out any smart info)

Thanks in advance for the revert.

Re: Practical Way to Upload Root Certificate on every host running OA Extension

Mike_L — Wed, 12 Jun 2024 14:48:00 GMT

Hopefully your organization uses something like chef, puppet or ansible for large scale server administration. This would be a great use case for such a tool. We don't provide any existing method for it as that'd be against the security method of requiring access to the host to approve the certificate.

Re: Practical Way to Upload Root Certificate on every host running OA Extension

Joseph_Hobbs — Thu, 13 Jun 2024 06:04:40 GMT

This is something I have to tackle as well in our environment. At this point my plan is to engage our OS team(s) to assist with deployment of the file. It should be trivial to have them assemble a package that drops the file in a specific location on each host...

Re: Practical Way to Upload Root Certificate on every host running OA Extension

AntonioSousa — Tue, 05 Aug 2025 09:47:25 GMT

@Mike_L ,

You have a good point here, but I would argue that having at least a way of including it along the installation process of OneAgent would make sense. If so, would put a Product Idea in for this.