Issue
Additional Certificate Authority (CA) certificates are required for certificate validation within an EBO container.
Product Line
EcoStruxure Building Operation
Environment
- EcoStruxure Building Operation (EBO) Container Servers
- Enterprise Central for Linux
- Enterprise Server for Linux
- Edge Server
Cause
EBO containers ship with a default CA bundle that contains Mozilla root certificates.
Additional CA certificates are not automatically included in the container and must be added to a custom CA bundle when required for the deployment.
Resolution
The supported method is to create a single PEM-formatted CA bundle that contains:
- The default Mozilla root certificates
- Any additional CA certificates required for the deployment
The default CA bundle is located at:
/opt/sbo/etc/ca-bundle.crt
New Container Deployment
- Create a combined CA bundle containing the default Mozilla root certificates and the required additional CA certificates.
- Start the container using the
--ca-bundleparameter.
Existing Container Deployment
- Copy the default CA bundle from the container.
- Append the required CA certificate(s) to the bundle.
- Use the updated CA bundle as required by the deployment.
Before deployment, verify that the updated CA bundle contains:
- The original Mozilla root certificates
- All additional CA certificates required for certificate validation
Additional Reference:
