NetIQ Documentation: NetIQ Cloud Manager 2.3 Installation Guide - Installing and Configuring Other Cloud Manager Feature Settings

13.4 Installing and Configuring Other Cloud Manager Feature Settings

When you have completed configuring the NetIQ Cloud Manager Application Server to use your chosen configuration source, you must use the NetIQ Cloud Manager configuration tool to install or configure other Cloud Manager features that help you administer Cloud Manager.

13.4.1 Installing the Cloud Manager Application Console

The first feature that the configuration tool can install is the Cloud Manager Application Console. The console is a Web-based user interface that lets you manage your Cloud Manager system. The console’s display layout varies, depending on the role of the user who logs in. We recommend that you install this UI when prompted, unless you choose to create your own customer Web UI.

For more information, see the NetIQ Cloud Manager 2.3 Procedures Guide.

13.4.2 Configuring the Cloud Manager Web Server (Jetty)

The Cloud Manager configuration tool lets you decide whether to integrate SSL with the Cloud Manager Web server (Jetty). If you want you configure a secure connection between Cloud Manager Orchestration Server and the Cloud Manager Application Server, you need to answer “yes” to the following question:

Choose whether to configure the NetIQ Cloud Manager web server to use SSL.

Use SSL with Jetty? (yes/no):

If you choose to use SSL, ensure that you know the information are prompted to provide during the Jetty SSL configuration:

Information Needed to Configure SSL Use with Jetty	Description
Web Console HTTPS Port	Specify the secure port for the Cloud Manager Application Console. By default, this is port 8183, but you can specify any unused secure port.
Web Console HTTP Port	Specify the HTTP (non-secure) port for the Cloud Manager Application Console. If you chose to enable SSL for Jetty, Cloud Manager disables this port in jetty.xml for security purposes. You can re-enable the port by uncommenting the relevant section of the file.

Information Needed to Configure SSL Use with Jetty

Description

Web Console HTTPS Port

Specify the secure port for the Cloud Manager Application Console.

By default, this is port 8183, but you can specify any unused secure port.

Web Console HTTP Port

Specify the HTTP (non-secure) port for the Cloud Manager Application Console.

If you chose to enable SSL for Jetty, Cloud Manager disables this port in jetty.xml for security purposes. You can re-enable the port by uncommenting the relevant section of the file.

13.4.3 Configuring the Cloud Manager Web Server to Use SSL

If you choose to use SSL with Cloud Manager’s Jetty Web server, you need to provide Secure Socket Layer (SSL) information that the Cloud Manager Application Server can use to provide a secure connection.

When the configuration tool displays its SSL configuration segment, it immediately detects the existing DNS name of the server where you are performing the configuration. Because this DNS name must match the subject of the security certificate, you can change the DNS name to match the subject of an existing certificate.

The configuration tool lets you choose to use either a self-signed certificate generated by the server, or an existing certificate that you can import. The configuration is based on the details you provide after that initial determination:

Select 'yes' if you want to use an existing certificate for <detected _dns_hostname>. If you select 'no', NetIQ Cloud Manager will use a self-signed certificate.

Use existing certificate? (y/n):

Make sure you are prepared with the following information you are prompted to provide for configuring the Cloud Manager Web Server to use an imported SSL certificate:

Information Needed to Configure an Imported SSL Certificate	Description
Path to the Cloud Manager Server Certificate	Specify the path to an existing public certificate (in PEM format) that you want to import and use on this server. For example: /home/jdoe/cloudmgr/newcert.pem
Path to the Cloud Manager Server Private Key	Specify the path to the private key file of this server. This must be the private key file (in PEM format) that is provided by your trusted certificate authority. For example: /home/jdoe/cloudmgr/newkey.pem
Private Keystore Password	Specify the password you want to use for decrypting the private key file exclusively for Cloud Manager. If you don’t want to use a password, press Enter when the tool prompts you with this question.

Information Needed to Configure an Imported SSL Certificate

Description

Path to the Cloud Manager Server Certificate

Specify the path to an existing public certificate (in PEM format) that you want to import and use on this server.

For example:

/home/jdoe/cloudmgr/newcert.pem

Path to the Cloud Manager Server Private Key

Specify the path to the private key file of this server. This must be the private key file (in PEM format) that is provided by your trusted certificate authority.

For example:

/home/jdoe/cloudmgr/newkey.pem

Private Keystore Password

Specify the password you want to use for decrypting the private key file exclusively for Cloud Manager.

If you don’t want to use a password, press Enter when the tool prompts you with this question.

13.4.4 Configuring Cloud Manager SMTP Mail Settings

Cloud Manager uses SMTP messaging to send notifications about pending or completed system tasks and Business Service status. These notifications are sent from a system-like user account to a Cloud Manager user who receives a preconfigured message appropriate for his or her role and based on conditions or events occurring in the Cloud Manager system.

The Cloud Manager configuration tool lets you decide whether to configure mail settings for the system.

If you choose to use email in this way, you need to answer “yes” to the following question:

Configure the SMTP mail settings at this time? (yes/no):

If you choose to use e-mail, make sure you know the information you are prompted to provide during the email configuration segment of the configuration:

Information Needed to Configure SMTP Mail Settings	Description
Email Address of Message Source	Specify the email address from which all system notifications are to be sent. This should be a “no-reply” address because the message is automatically generated from the Cloud Manager system.
Cloud Manager SMTP Host	Specify the DNS name of the SMTP host you want to use with Cloud Manager, for example: smtp.example.test.
SMTP Port	Specify the port that the SMTP server is listening on. The default setting is port 25, but you can specify another port if you want to.

Information Needed to Configure SMTP Mail Settings

Description

Email Address of Message Source

Specify the email address from which all system notifications are to be sent. This should be a “no-reply” address because the message is automatically generated from the Cloud Manager system.

Cloud Manager SMTP Host

Specify the DNS name of the SMTP host you want to use with Cloud Manager, for example: smtp.example.test.

SMTP Port

Specify the port that the SMTP server is listening on.

The default setting is port 25, but you can specify another port if you want to.

If your SMTP server requires authentication, you can configure SMTP later in the Cloud Manager Application Console.

13.4.5 Configuring Cloud Manager System Shell Login Information

As the system administrator, you have access to the inner workings of NetIQ Cloud Manager. You can access the system through an Apache Karaf shell or through the Karaf Web console (http://<cloud_manager_server_address>:8181/system/console/bundles). This segment of the configuration tool process lets you establish the login credentials for the Karaf system administrator.

The credentials you are prompted to provide for the system administrator configuration are independent of any other credentials for the Cloud Manager System.

Information Needed to Configure Authentication for the System Shell	Description
System User	Specify the initial user name that you want to designate as the Karaf system user.
System User’s Password	Specify the password of the system user. This doesn’t need to correlate to any directory password. It is stored in the users.properties file located in /etc/opt/netiq/cloudmanager/etc.