Google Cloud Storage service certificate file setup

Content Manager OnDemand must be registered as a service with Google Cloud Storage for authentication and access.

Perform these steps to register Content Manager OnDemand with Google Cloud Storage:

1. From the Google Cloud Storage Project Dashboard, select Credentials.
2. Under Service Accounts, select Manage Service Accounts.
3. Create a service account that Content Manager OnDemand will use to access Google Cloud Storage.

• Record the email address for later use with Content Manager OnDemand. This email address will be the login that is used when you create Content Manager OnDemand storage nodes.
• After the service account is created, go to the Manage Keys section for the new account and create a new .p12 key. You will need the password and the downloaded key file for Content Manager OnDemand to access Google Cloud Storage.

4. Create a keystore stash file for the downloaded .p12 file and enter the password that you recorded in Step 3b when prompted.

   gsk8capicmd_64  -keydb -stashpw -db <file.p12>

5. Look up the key file label in the .p12 file for use in the Google Cloud Storage configuration file.

   gsk8capicmd_64 -cert -list -db <file.p12> -stashed

   GSKCapiCmd displays the following result:

   Certificates found
   * default, - personal, ! trusted, # secret key
           privatekey

6. Keep the .p12 and .sth files together. The Google Cloud Storage configuration file only references the .p12 file. Content Manager OnDemand expects the .sth file to be in the same directory as the .p12 file.