Skip to content

Commit 5c42c80

Browse files
authored
Improve clarity of certificate handling instructions
Clarified instructions for exporting the private key and setting permissions. Updated command descriptions for better clarity.
1 parent 39df6b3 commit 5c42c80

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

support/system-center/scom/use-ca-certificate-on-scx-agent.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -85,7 +85,7 @@ Use one of the following methods to configure the certificate on the the Unix/Li
8585
openssl pkcs12 -in <FileName>.pfx -nocerts -out /etc/opt/omi/ssl/omikey.pem -nodes -passin pass:"pfxpassword"
8686
```
8787

88-
> While exporting the private key from the certificate store, a new password has to be set for the new key file, unless you specify the `-nodes`, This option stands for `no DES` encryption which instructs OpenSSL to output the private key in an unencrypted format.
88+
> While exporting the private key from the certificate store, include the `-nodes` paramter (stands for no DES) which instructs OpenSSL to output the private key in an unencrypted format, otherwise a new password has to be set for the new key file.
8989

9090
1. Export the certificate by using the following command:
9191

@@ -100,7 +100,7 @@ Use one of the following methods to configure the certificate on the the Unix/Li
100100
ln -s /etc/opt/omi/ssl/omi-host-$(hostname).pem /etc/opt/omi/ssl/omi.pem
101101
```
102102
103-
1. Set the correct permissions and ownership on omikey.pem, Certificate and Symbolic Link:
103+
1. Set the correct permissions and ownership on the private key, certificate and symbolic link:
104104

105105
```console
106106
chmod 600 /etc/opt/omi/ssl/omikey.pem
@@ -109,7 +109,7 @@ Use one of the following methods to configure the certificate on the the Unix/Li
109109
chown root:omi /etc/opt/omi/ssl/omi-host-$(hostname).pem /etc/opt/omi/ssl/omi.pem
110110
```
111111

112-
1. Restart the SCX agent by using the following command:
112+
1. Restart the SCX agent by running the following command:
113113

114114
```console
115115
scxadmin -restart
@@ -124,7 +124,7 @@ Use one of the following methods to configure the certificate on the the Unix/Li
124124
:::image type="content" source="media/use-ca-certificate-on-scom-linux-agent/command-validate-omi-processes.png" alt-text="Screenshot that shows the command to validate omi processes running." lightbox="media/use-ca-certificate-on-scom-linux-agent/command-validate-omi-processes.png":::
125125

126126
### Method 2: Configure Certificate with Bash Script
127-
1. Save the below bash script extract_scx_cert.sh
127+
1. Save the following bash script extract_scx_cert.sh
128128

129129
```console
130130
#!/bin/bash
@@ -163,13 +163,13 @@ Use one of the following methods to configure the certificate on the the Unix/Li
163163
systemctl restart omid
164164
```
165165

166-
1. Change Script permissions to be executed
166+
1. Change script permissions to be executed
167167

168168
```console
169169
chmod +x /home/user/extract_scx_cert.sh
170170
```
171171

172-
1. Execute the script with the parameters as below with the path to the pfx file and the password for it:
172+
1. Run he following command to execute the script with the two parameters; the path to the pfx file and the password for it
173173

174174
```console
175175
sudo ./extract_scx_cert.sh /path/to/certificate.pfx pfx_password

0 commit comments

Comments
 (0)