How to generate CSR Certificate in Analytics ?

A rare ask, but can get pressing... below are the steps to follow on Analytics...

1. Login to Analytics. Execute # sudo su (and supply password)
2. Copy the van-csrgen.sh and van-import-cert.sh to /home/versa/ and provide execute permissions.
   -> chmod a+x van-csrgen.sh van-import-cert.sh
3. Generate CSR

Eg:

./van-csrgen.sh -- domain example.com --country US  --state California  --locality  "Santa Clara" ­ organization example.com  --organizationalunit IT  --email administrator@example.com -- keypas example123

4.The process of generating a CSR creates a public and private key on the Versa Analytics server. After the CSR is generated, you need to submit it to an external CA such as VeriSign, Thawte, Symantec, etc. to sign your certificate requests.

There are many certification authorities to whom you can apply for getting your certificates signed. A CA should satisfy the following criteria:

a) Allows freedom to deploy certificates on any number of servers.
b) Provides an efficient certification management tool to manage all certificates.
c) Provides technical support.
d) Is a publicly trusted CA.

5. Installing existing private key and CA-signed certificate on Versa Analytics Server

6. Copy the CA signed certificate to /home/versa/

7. Install the Certificate by using the below script. The CA signed cert could be in the form or .cer or .crt

Eg:

./van­import­key­cert.sh ­-key /opt/versa/var/van-app/certificates/certs/<example.com.key> --cert  /home/versa/example.com.crt  -- keypas example123 [--ca_file <path to CA root certficate ]

8. if Step#7 succeeds then tomcat keystore file will be created under /opt/versa/var/van-app/certificates/certs/

9. Copy the "tomcat_keystore.jks" file to /opt/versa_van/apps/apache-tomcat-7.0.55/conf/

10. Restart Versa Analytics services. (vsh restart)