Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Announcement: Try the Ask AI chatbot for answers to your technical questions about Juniper products and solutions.

close
header-navigation
keyboard_arrow_up
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

Install User Certificates

date_range 29-Jan-25

You can configure Paragon Automation to use custom user certificates. You can install user certificates either when you deploy the Paragon Automation cluster or post deployment.

To upload and install custom user certificates, perform the following steps:

  1. Log in to the Linux root shell of the node from which you deployed the cluster.
  2. Copy the custom user certificate file and key file to the root/epic/config directory.
  3. Type cli to log in to Paragon Shell and type configure to enter configuration mode.
  4. Configure the following parameters, commit, and exit the configuration mode.
    content_copy zoom_out_map
    root@Primary1# set paragon cluster common-services ingress user-certificate use-user-certificate true
    
    root@Primary1# set paragon cluster common-services ingress user-certificate user-certificate-filename "certificate.cert.pem"
    
    root@Primary1# set paragon cluster common-services ingress user-certificate user-certificate-key-filename "certificate.key.pem"
    
    root@Primary1# commit
    commit complete
    
    [edit]
    root@Primary1# exit
    Exiting configuration mode
    
    root@Primary1>

    Where:

    certificate.cert.pem is the user certificate filename.

    certificate.key.pem is the user certificate key filename.

  5. Regenerate the configuration files.
    content_copy zoom_out_map
    root@Primary1> request paragon config
    Paragon inventory file saved at /epic/config/inventory
    Paragon config file saved at /epic/config/config.yml
  6. Deploy the certificates.
    content_copy zoom_out_map
    root@Primary1> request paragon deploy cluster input  “-t  ingress-controller”
    Process running with PID: 23xx022
    To track progress, run 'monitor start /epic/config/log'
footer-navigation