Breadcrumbs

Replace certificate for Open Policy Agent (OPA)

  1. Generate a new certificate

    1. Open VeridiumManager and go to Settings - Certificates - Service Credentials and select Others. In the list below, locate OPA and click the Renew button next to it.

      image-20220608-104012.png

    2. Press 'Generate OPA certificate' in the confirmation dialog:

      image-20220614-082823.png


    3. A zip archive containing the new certificate will be downloaded.

      image-20220614-082602.png


  2. Install the new certificate

    1. copy the zip file from your computer to the server where OPA service is installed

      1. scp opa-cert.zip veridiumid@<IP_ADDRESS>:/home/veridiumid

    2. ssh into the server where OPA service is installed:

      1. ssh veridiumid@<IP_ADDRESS>

    3. execute the following

      1. sudo /opt/veridiumid/opa/bin/config-opa.sh -c /home/veridiumid/opa-cert.zip