Creating certificate bundles on the Quorum Witness server

Create two certificate bundles so that the Quorum Witness (QW) server can authenticate the Quorum Witness client. Perform the following steps on the server where Quorum Witness will be installed.

Prerequisites

Obtain the CA-signed certificate and the trust chain for the Quorum Witness server.
Obtain the CA-signed certificate and the trust chain for the Quorum Witness client for each storage system.

Procedure

Confirm that the following files are in the /root directory.

ls -l *.pem

[root@vm1234 ~]# ls -l *.pem
-rw-r--r--  1 root root     1438 May 23 09:35 vm1234-ip6.abc.yourcorp.net_cert.pem
-rw-r--r--  1 root root     1021 May 23 09:17 vm1234-ip6.abc.yourcorp.net-server.csr.pem
-rw-r--r--  1 root root     1675 May 23 09:11 vm1234-ip6.abc.yourcorp.net-server.key.pem
-rw-r--r--  1 root root     1290 May 23 08:43 RootCA_cert.pem

Create a file called cert.pem in the /root directory that contains the following files:
- {SYSTEM_QW}.key.pem
- {SYSTEM_QW}_cert.pem
- RootCA_cert.pem
For example: cat vm1234-ip6.abc.yourcorp.net-server.key.pem vm1234-ip6.abc.yourcorp.net_cert.pem RootCA_cert.pem > cert.pem.