Skip to main content

AWS Certificate Manager

[edit on GitHub]

Warning

We are currently working on making the setup and upgrade process to Automate HA a seamless experience. If you are already using Chef Automate HA, or are planning to use it, please contact your customer success manager or account manager for more information.

This page explains how to use the AWS Certificate Manager (ACM) console to generate a public ACM certificate for your domain.

You can either generate a new public certificate or copy an existing Amazon Resource Name (ARN) value of the certificate of your selected region in the AWS console.

AWS ACM ARN Value

Requesting a Public Certificate using AWS console

Follow these steps if you want to request an ACM public certificate:

  1. Sign in to the AWS Management Console.

  2. Open the ACM console.

  3. Select your region from the top-right corner of the console.

  4. Select Request a certificate.

AWS ACM

  1. Select the Request a public certificate option from the Certificate type page, and select Next.

  2. In the Domain names section, enter your domain name. You can use a fully qualified domain name (FQDN), such as www.example.com, or a bare domain name such as example.com.

Note

Before ACM issues a certificate, it validates that you own or control the domain names in your certificate request. You can use either email validation or DNS validation.

  1. In the Select validation method section, select either DNS validation or Email validation.

  2. From the Tags page, tag your certificate. Tags are key-value pairs that serve as metadata for identifying and organizing AWS resources.

Certificates
  1. Select Request. The console returns you to your certificate list after processing the request, where your new certificate displays with status, Pending validation.

You can also request a public certificate using the Command Line Interface (CLI). For detailed information on requesting these certificates, refer AWS documentation on requesting a public certificate.

Providing Certificate ARN Value in config.toml Configuration file

Follow these steps if you want to use the AWS certificates in your network infrastructure:

  1. Log in as a Sudo user by using su- command.

  2. Navigate to the hab workspace directory.

  3. Open the config.toml file in any editor of your choice.

AWS Certificate ARN Value
  1. Copy the existing or generated ARN value from AWS console to the chef_server_lb_certificate_arn and automate_server_lb_certificate_arn fields in the config.toml file.
AWS Certificate ARN Value
  1. Save and close the file.

Was this page helpful?

×









Search Results