AWS Certificate Manager
This page explains how to use the AWS Certificate Manager (ACM) console to generate a public ACM certificate to create a Load Balancer (LB).
You can either generate a new public certificate or copy an existing Amazon Resource Name (ARN) value of the certificate of your selected region in the AWS console.
![AWS ACM ARN Value](/images/automate/ha_aws_cert_mngr_arn.png)
Requesting a Public Certificate using AWS console
Follow these steps if you want to request an ACM public certificate:
Sign in to the AWS Management Console.
Open the ACM console.
Select your region from the top-right corner of the console.
Select Request a certificate.
![AWS ACM](/images/automate/ha_aws_cert_mngr_console.png)
Select the Request a public certificate option from the Certificate type page, and select Next.
In the Domain names section, enter your domain name. You can use a fully qualified domain name (FQDN), such as
www.example.com
, or a bare domain name such asexample.com
.
Note
In the Select validation method section, select either DNS validation or Email validation.
From the Tags page, tag your certificate. Tags are key-value pairs that serve as metadata for identifying and organizing AWS resources.
![Certificates](/images/automate/ha_cert.png)
- Select Request. The console returns you to your certificate list after processing the request, where your new certificate displays with status, Pending validation.
You can also request a public certificate using the Command Line Interface (CLI). For detailed information on requesting these certificates, refer AWS documentation on requesting a public certificate.
Providing Certificate ARN Value in a2ha.rb
Configuration file
Follow these steps if you want to use the AWS certificates in your network infrastructure:
Log in as a Sudo user by using
su-
command.Navigate to the
hab
workspace directory.Open the
a2ha.rb
file in any editor you like.
![AWS Certificate ARN Value](/images/automate/ha_load_balancer.png)
- Copy the existing or generated ARN value from AWS console to the
chef_server_lb_certificate_arn
andautomate_server_lb_certificate_arn
fields in the a2ha.rb file.
![AWS Certificate ARN Value](/images/automate/ha_a2rb_lb_certificate.png)
- Save and close the file.
Was this page helpful?