Horizon Cloud Connector 2.4 and Later - When You Have SSL Off-Loading Configured for Outbound Traffic, Configure Your Custom CA-Signed Certificates in Horizon Cloud Connector to Allow Connections to the Horizon Control Plane

The Horizon Cloud Connector appliance must communicate outbound with the Horizon control plane. When you have your outbound traffic configured with SSL off-loading, you must configure your custom CA-signed certificates within the Horizon Cloud Connector trust store to allow the outbound connection to the control plane.

This feature is supported for use with Horizon Cloud Connector version 2.4 and later.

Prerequisites

Verify that you have the following items.

• Valid CA-signed certificate or certificates, depending on what you are using in your SSL off-load configuration. Both CRT and PEM file formats are supported.

  Note: Ensure that the certificate is valid. If the certificate is invalid, the command will not import the certificate. If invalid, the import process will silently discard that certificate.

• Location of the file named configure-adapter.py in the Horizon Cloud Connector filesystem. The configure-adapter.py file is located in a bin directory within the /opt directory structure. For example, for Horizon Cloud Connector version 2.5 and later, the file is located in /opt/horizon/bin directory.

Procedure

1. Copy your CA-signed certificate or certificates to directory /opt/container-data/hydracerts/ within the Horizon Cloud Connector virtual appliance.

2. Change directories to the location of the configure-adapter.py file and run the following command to import the certificates.

   configure-adapter.py --importCertificates
   

   This command does all the necessary work that is required to import your provided certificates. It changes the permissions of the directory's files to 644, imports the certificates, and then restarts the appliance's relevant Kubernetes pods to pick up the change.

   This restart process takes several minutes.