cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

How do I prepare the KeyStore?

tarjei
Organizer

In the documentation

https://www.dynatrace.com/support/help/deploy-dyna...

It says to execute the following command

<code>openssl pkcs8 -export -out <dynatrace-keystore.pkcs8> -name dynatraceserver -password pass:dynatrace -in <server_certificate.cer> -certfile <root-and-intermediate-certificates.cer> -inkey <private-key-for-certificates.pem>

I am not able to make this command work, as it seems that openssl does not accept all the parameters when using the pkcs8 parameter. Any tips?


3 REPLIES 3

aleksander_plin
Dynatrace Newcomer
Dynatrace Newcomer

It looks like there is a bug in documentation, the openssl parameter is pkcs8, but it should be pkcs12

Thank you for pointing it out, we will fix it ASAP


tarjei
Organizer

Ok, that answers the question regarding the command, which works now. How about how to add this to a Managed Node and / or Active Gate?

From what I can see this is possible to do at installation time, atleast according to documentation, but I do not see any option for doing this when already installed.


aleksander_plin
Dynatrace Newcomer
Dynatrace Newcomer

In such case you need to go to Cluster Management Console, Home -> Settings -> Preferences and switch off the setting Enable management of domain name and SSL certificates.

After that, you need to go to details of every cluster node on Home screen and use Edit SSL certificate button to enter certificate data.