Private RSA Key for Security Certificate Management?

Elastic Orchestration Elastic Cloud Enterprise (ECE)
1

I am trying to update the self-signed certificate with a real certificate from AWS.

I retrieved the certificate chain from AWS with:
aws acm get-certificate --certificate-arn <ARN-HERE>

The response is JSON containing "Certificate", and "CertificateChain"

I am trying to format a proper PEM to use for the upload.

So the question is, "What goes where?"

  • I assume the CertificateChain is as the name says.
  • Where is the Private RSA Key supposed to come from?
2

Gary,

I'd take a look at this https://www.elastic.co/guide/en/cloud-enterprise/current/ece-manage-certificates.html

Are you uploading the RSA private key of the machine that is hosting the proxy role?