Install a Gateway with Custom Certificates

This section discusses installing a gateway over a proxy server when the proxy server has custom certificates.

Install a Gateway with Custom Certificates on UNIX-based hosts

To perform a gateway installation over a proxy server when your proxy server has custom certificates on UNIX-based hosts:

Contact the IT Security team within your organization and obtain the correct custom certificate (root certificate) before proceeding. See Custom Certificates for more details.

Confirm the custom certificate is saved in DER format. Typically these certificate files would have a .der extension. For example, it can be saved as mycert.der.
Review and confirm that you have performed the steps listed in Generic Prerequisites for Deploying Oracle Management Cloud Agents, Download the Oracle Management Cloud Agent Software and Prerequisites for Installing a Gateway.
Ensure that you have correctly updated and saved the response file (gateway.rsp). See Registration Parameters for Installing a Gateway and based on your requirements also, Optional Parameters for Installing a Gateway .
Log in to the host where you are planing to install the gateway, navigate to the directory where you have extracted the gateway installation software ZIP file and confirm agentcoreimage.zip file exists.
```
cd <path to the stage location> 
ls -la agentcoreimage.zip
```

Update the agentcoreimage.zip file with your custom certificate file and name it trustCertProxy. Your custom certificate file will be placed in the trustedcerts directory in the .zip file.

cd <path to the stage location> 
mkdir -p core/1.<nn>.0/stage/sysman/config/server/trustedcerts 
cp <your proxy custom certificate> core/1.<nn>.0/stage/sysman/config/server/trustedcerts/trustCertProxy 
zip -u agentcoreimage.zip core/1.<nn>.0/stage/sysman/config/server/trustedcerts/trustCertProxy

For example if you have 1.42 version and extracted the installation software under /u01/stagedirectory, you can run the following:

cd /u01/stage 
mkdir -p core/1.42.0/stage/sysman/config/server/trustedcerts 
cp mycert.der core/1.42.0/stage/sysman/config/server/trustedcerts/trustCertProxy 
zip -u agentcoreimage.zip core/1.42.0/stage/sysman/config/server/trustedcerts/trustCertProxy

Run the agent installation script to install a gateway.

./AgentInstall.sh
Your gateway installation is now complete. Next step is to Verify the Gateway Installation.

Install a Gateway with Custom Certificates on Windows hosts

To perform a gateway installation over a proxy server when your proxy server has custom certificates on Windows, ensure to do a right-click and select Run as administrator to open an Administrator command prompt and perform the following:

Contact the IT Security team within your organization and obtain the correct custom certificate (root certificate) before proceeding. See Custom Certificates for more details.

Confirm the custom certificate is saved in DER format. Typically these certificate files would have a .der extension. For example, it can be saved as mycert.der.
Review and confirm that you have performed the steps listed in Generic Prerequisites for Deploying Oracle Management Cloud Agents, Download the Oracle Management Cloud Agent Software and Prerequisites for Installing a Gateway.
Ensure that you have correctly updated and saved the response file (gateway.rsp). See Registration Parameters for Installing a Gateway and based on your requirements also, Optional Parameters for Installing a Gateway.
Log in to the host where you are planing to install the gateway, open Windows Explorer, navigate to the directory where you have staged the gateway installation software ZIP file and double-click the ZIP file to confirm agentcoreimage.zip file exists.
Update the agentcoreimage.zip file with your custom certificate file and name it trustCertProxy: Using Windows Explorer, navigate into the zipped file agentcoreimage.zip up to the trustedcerts directory (core\<version number>\stage\sysman\config\server\trustedcerts) and copy the custom certificate (root certificate) as file trustCertProxy into it. This will automatically update the agentcoreimage.zip ZIP file.
Run the agent installation script to install a gateway.

AgentInstall.bat
Your gateway installation is now complete. Next step is to Verify the Gateway Installation.