Google CA

Prerequisites

The prerequisites for configuring a Google CA account in AppViewX are as follows:
  • Ensure all necessary setup is completed on the Google CA portal.

    For references, click here.

  • A Google client certificate or Google client authentication Json for a user having necessary access for enrolling the certificates and for other Certificate Lifecycle Management (CLM) operations.
  • AppViewX server should either have internet access or have a proxy configured in AppViewX general settings. Refer the Managing Proxy Settings documentation in the Platform guides.
  • The URL https://www.googleapis.com should be reachable from AppViewX.

Configuring Google

  1. Go to (Menu) > CERT+ > ADMINISTRATION > Certificate Authority.
  2. From the displayed CA, Select Google.
    The Google home page is displayed.
  3. Click the Configure Now button or +Add icon from the middle or top-right of the page respectively.
    The Google configuration page is displayed.
  4. Update the following details in the General Information section as described in the table:
    Table 1. General Information - Field Description Table
    Fields Description
    *CA Account name A unique name to identify the CA setting.
    Note: No special characters other than ‘.’, ‘-’,’_’ are allowed. The name should not start with special characters.
    *Purpose/Usage Certificate Type for which CLM actions will be enabled. For example, Server and Client
    Proxy Required Enable this field if the CA communication needs to happen via Proxy. The proxy details configured in general settings will be used for communication.
    Data Center (AppViewX's CA agent) Select the data center through which the CA communication needs to happen.
    *: Mandatory fields
  5. Configure either Certificate Upload or JSON Upload. These fields are necessary for invoking the Google CA APIs via Certificate Upload for Certificate Management. Select the Certificate Upload check box,
    Update the following details in the CA Configuration section as described in the table.
    Fields Description
    *Certificate and Key Client authentication certificate for API communication.
    *Email address Email address of the user
    *Project Id Id of the project
    *: Mandatory fields
  6. Select the JSON Upload check box and configure a CA. Click the Upload button to upload the JSON file.
  7. Click Validate and Fetch. The issuer names available for the CA account will be fetched along with the validity of the issuers from the Certificate Authority.
  8. Click Save.
    In the CA instance inventory, the connection status is initially set to In Progress. Twice after this, this status is automatically checked and refreshed every 5 seconds. Once the CA instance is successfully configured, the status is updated to Success. Status checks after the first two times have to be done via a manual refresh.
    Note: In case the connection fails, you can manually verify the connection status by clicking the Check button in the Connection Status field.

Manually Validating the Google CA Connection Status

  1. Go to (Menu) > CERT+ > ADMINISTRATION > Certificate Authority.
  2. From the displayed CA, Select Google.
    The Google home page is displayed.
  3. In the Status column of the grid with the listed accounts, click Check to validate the CA setting that is created.
    CA communication will be validated and the Connection Status will be shown as either Success or Failure.