Connecting to the Instance:

• SSH via port 22 with the username 'centos'

Configuring SSL

Perform the following steps on the machine that will run the API Server.

1. Install CA Server

   $ sudo /usr/share/zts/cmc/zts-cmc-server/bin/install_ca_server.sh
   -p -o -u -e
   -l -s -c

   replace with a password you generate.

   CA parameters are optional; if it is not specified, defaults will be used.

   Here's an example of this command.

   $ sudo /usr/share/zts/cmc/zts-cmc-server/bin/install_ca_server.sh
   -p asdf1234 -o Zettaset -u Engineering -e engineering@zettaset.com 
   -l 'Mountain View' -s California -c US

2. Start CA Server

   $ sudo service estserver start

3. Generate certificates for API Server and Web Server

   $ sudo /usr/share/zts/cmc/zts-cmc-server/bin/configure_ssl_certs.sh
   -i -p
   -o -u -e
   -l -s -c
   -n

   replace with the public IP address of the local host replace with the CA password you created in Step 1.

   replace in -n argument with the DNS (or resolvable via /etc/hosts) name of the Management Console server.

   CA parameters are optional; if it is not specified, defaults will be used. Make sure that you specify the same CA parameters as those you used in step 1 above.

   When this command finishes executing, it will display keystore password. Save this password in a secure location. You will need it to configure the API server.

   If you are installing CLI client on the same host as the API server, make sure the CLI client RPM is installed before running this command. This will ensure that the CA certificate will be automatically added to CLI client configuration.

   Here's an example of this command.

   sudo /usr/share/zts/cmc/zts-cmc-server/bin/configure_ssl_certs.sh
   -i 192.168.99.100 -p asdf1234
   -o Zettaset -u Engineering -e engineering@zettaset.com 
   -l 'Mountain View' -s California -c US
   -n ztc-cmc

4. Stop CA Server

   $ sudo service estserver stop

5. If your CLI client is installed on a host other than the API server, perform the following steps to configure SSL connection between the CLI client and the API server:

   5.1. Obtain CA certificate for the API server. It is located in /usr/share/zts/ca/certs/cacert.pem on the API server host.

   5.2. On the host where you installed the CLI client, place the CA certificate in /usr/share/zts/cmc/zts-cmc-cli/config/cacert.pem and make sure that it is readable by users that will run the CLI client.

Coniguring CLI Client:

Perform the following steps on the host that runs CLI client.

1. Configure API server connection in ~/.zts/adminconfig.

sample ~/.zts/adminconfig file

[default] Consoleserver = zmc-server # hostname or IP address of the console server UseSSL = yes CAcert = /usr/share/zts/cmc/zts-cmc-cli/config/cacert.pem # leave as default

end sample file

By default, the API server will use port 8444 when SSL is enabled and port 8081 when SSL is not enabled.

2. Configure API server credentials in ~/.zts/admincredentials files

sample ~/.zts/admincredentials file

[default] userid = system password = manager

end sample file

IMPORTANT: All CLI commands in the following sections of this document assume that you performed the configuration steps described in this section.

Configuring API Server:

1. Make sure you performed CLI Client configuration steps documented in Section I and Section II.

Perform the following steps on the API server host.

2. Set API server name via property in the server configuration file /usr/share/zts/