4. Frequently Asked Questions

4.1. How do I run commands on my Kubernetes cluster?

If you want to run kubectl commands on your Kubernetes Cluster, connect your terminal to your cluster.

Note

To only run kubectl commands, it is not necessary to have the File Share mounted. If you are trying to set up the solution, please follow the instructions in Connect to the Azure File Share instead.

  1. In the Azure portal, enter Kubernetes Services in the search box. Select Kubernetes Services.

  2. Click inoQulate.

  3. Click Connect.

  4. Follow the instructions in the panel.

  5. Run the commands.

4.2. How do I retrieve the Object ID of the administrator?

  1. In the Azure portal, enter Microsoft Entra ID in the search box. Select Microsoft Entra ID.

  2. In the left panel, under Manage, select Users.

  3. Click the Administrator’s account.

  4. Copy the Object ID.

4.3. How do I access the admin webpages of EJBCA and Signserver?

The address of admin webpages of EJBCA and Signserver can be found in What’s the web address for the EJBCA Admin Page / Signserver Admin Page?.

If the setup has been completed, you need the client certificate installed on your computer for authentication to the admin webpages.

  1. Download the client certificate from config/superadmin.p12 in the Azure File Share.

  2. Retrieve the client certificate password by command line. See How do I run commands on my Kubernetes cluster? and Client Cert Password.

  3. Install superadmin.p12 into your Operating System, entering the password above. On Windows, double-click the file to install.

    Note

    Accessing the admin webpages from Chrome/Firefox

    If you are accessing the admin webpages on Chrome, Firefox or one of the similar derivatives, the client certificate should not be installed on your Operating System, but in the browser’s certificate store directly. See My Chrome/Firefox browser won’t recognise my SuperAdmin certificate..

  4. Access the EJBCA or Signserver admin webpage by entering the address in your browser.

  5. You should be prompted to select a certificate. Select the certificate you just installed.

4.4. What’s the web address for the EJBCA Admin Page / Signserver Admin Page?

You can retrieve the addresses of EJBCA and Signserver Admin pages specific to your deployment in the Deployment Output page:

  1. Navigate to the resource group (typically inoQulate).

  2. Click the inoQulate Managed Application resource.

  3. In the left panel, expand Settings and click Parameters and Outputs.

caAdminPage and signerAdminPage are the addresses for the EJBCA and Signserver Admin Pages respectively.

4.4.1. Constructing the Address

The following table summarises how the URL is constructed, for your information.

Table 4.1 Admin Page Addresses

EJBCA Admin Page caAdminPage
https://<CA Domain Name Label>.<location>.cloudapp.azure.com/ejbca/adminweb/
e.g., https://demo-inoqulate-ca.southeastasia.cloudapp.azure.com/ejbca/adminweb/
Signserver Admin Page signerAdminPage
https://<Signer Domain Name Label>.<location>.cloudapp.azure.com/signserver/adminweb/
e.g., https://demo-inoqulate-signer.southeastasia.cloudapp.azure.com/signserver/adminweb/

  • Substitute <CA Domain Name Label> for the CA Domain Name Label value configured in CA Domain Name Label. The default value is <domain-prefix>-inoqulate-ca.

  • Substitute <Signer Domain Name Label> for the Signer Domain Name Label value configured in Signer Domain Name Label. The default value is <domain-prefix>-inoqulate-signer.

  • Substitute <location> for the region code name of the Kubernetes cluster deployment.

4.5. How do I fully uninstall the solution?

You may fully uninstall the solution by deleting the Managed Application inoQulate. Alternatively, if you created a new resource group for inoQulate, you may delete the resource group, which also deletes the Managed Application.

If you also installed the inoQulate PDF Verifier, you may uninstall it from Installed Apps in your Windows computer.