Using a custom certificate (IBM Concert Operate on Linux)

Learn how to add a custom certificate to a deployment of IBM Concert Operate on Linux.

If you want to use a custom certificate for a deployment of IBM Concert Operate on Red Hat OpenShift Container Platform, use the procedure in Using a custom certificate and hostname (IBM Concert Operate on Red Hat OpenShift).

Procedure

If you want to use your own custom certificate for IBM Concert Operate instead of the default cluster certificate, then use the following steps after you have installed IBM Concert Operate on Linux.

Ensure that you have the following three PEM-encoded X.509 certificate files:
- caintermediate.pem: The intermediate certificate that issued your server certificate.
- aiops.pem: An IBM Concert Operate certificate, which includes the two fully qualified domain names (FQDNs) for aiops-cpd and cp-console-aiops in the Subject Alternative Name (SAN) list.
- aiops.key.pem: A key file for the signed certificate in aiops.pem
You can find the FQDNs for aiops-cpd and cp-console-aiops with the following command:
```
kubectl get httproute -n aiops
```
Concatenate the server and intermediate certificates into one file called aiops-certificate-chain.pem.
```
cat aiops.pem caintermediate.pem > aiops-certificate-chain.pem 
```

Update the system configuration with the new certificate.

aiopsctl server custom-certificate --certificate-file aiops-certificate-chain.pem --key-file aiops.key.pem