How do I prepare the KeyStore?

[tarjei_utnes]

In the documentation

https://www.dynatrace.com/support/help/deploy-dyna...

It says to execute the following command

<code>openssl pkcs8 -export -out <dynatrace-keystore.pkcs8> -name dynatraceserver -password pass:dynatrace -in <server_certificate.cer> -certfile <root-and-intermediate-certificates.cer> -inkey <private-key-for-certificates.pem>

I am not able to make this command work, as it seems that openssl does not accept all the parameters when using the pkcs8 parameter. Any tips?

[aleksander_plin]

It looks like there is a bug in documentation, the openssl parameter is pkcs8, but it should be pkcs12

Thank you for pointing it out, we will fix it ASAP

[tarjei_utnes]

Ok, that answers the question regarding the command, which works now. How about how to add this to a Managed Node and / or Active Gate?

From what I can see this is possible to do at installation time, atleast according to documentation, but I do not see any option for doing this when already installed.

[aleksander_plin]

In such case you need to go to Cluster Management Console, Home -> Settings -> Preferences and switch off the setting Enable management of domain name and SSL certificates.

After that, you need to go to details of every cluster node on Home screen and use Edit SSL certificate button to enter certificate data.