> ## Documentation Index
> Fetch the complete documentation index at: https://docs.futurex.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure the VirtuCrypt Intelligence Portal

> Procedural guide to configure VIP for CryptoTunnel, including certificate download and connection testing.

This section describes the following processes:

* Logging in to the VirtuCrypt Intelligence Portal (VIP).
* Creating a new CryptoTunnel to allow connections between the CryptoTunnel Guardian and the Prometheus Proxy defined by the VIP user.
* Downloading a PKCS #12 client TLS connection certificate for the customer Prometheus instance.

## Log in to the VIP

Log in at [**https://vip.virtucrypt.com/login**](https://vip.virtucrypt.com/login) with an account identity that is authorized to access the **CryptoTunnel** and CryptoVerse services in your VIP account.

## Create a CryptoTunnel

Perform the following steps to create a CryptoTunnel for the connection between the CryptoTunnel Guardian and the Prometheus Proxy:

<Note>
  If you set up Advanced Metrics for your VIP account, you have at least two CryptoTunnels. One for the service you are using and another one for the metrics related to that service.
</Note>

<Steps>
  <Step>
    Select **CryptoTunnel** in the services list.
  </Step>

  <Step>
    Select **\[ Add CryptoTunnel ]** at the top of the page.
  </Step>

  <Step>
    Configure the CryptoTunnel, selecting **Advanced Metrics** in the **Service** drop-down menu, as shown in the following image:

    <Frame caption="CryptoTunnel creation settings">
      <img src="https://mintcdn.com/futurex-a224dff3/gi2ge3enxbvcbz2E/images/VirtuCrypt_Integrations/cryptotunnel_creation_settings.png?fit=max&auto=format&n=gi2ge3enxbvcbz2E&q=85&s=9bb5b01c1028315bd91731896e8874d7" alt="CryptoTunnel creation settings" width="1396" height="1822" data-path="images/VirtuCrypt_Integrations/cryptotunnel_creation_settings.png" />
    </Frame>

    <Note>
      CryptoVerse is the company-specific application that CA uses to verify clients.

      Endpoint is the destination that the CryptoTunnel Guardian connects to after proxying users.
    </Note>
  </Step>

  <Step>
    Select\*\*\[ OK ]\*\*.

    <Check>
      The new CryptoTunnel should be listed now in the CryptoTunnel Management menu.
    </Check>
  </Step>
</Steps>

## Enable the CryptoTunnel

Perform the following steps to enable the CryptoTunnel:

<Steps>
  <Step>
    In the **CryptoTunnel Management** menu, expand the new CryptoTunnel by selecting the down arrow on the far right.
  </Step>

  <Step>
    Select **\[ Enable ]**.
  </Step>
</Steps>

## Download a PKCS #12 client certificate

Perform the following steps to download a PKCS #12 client TLS connection certificate for the customer Prometheus instance:

<Steps>
  <Step>
    Go back to the home page of your VIP account.
  </Step>

  <Step>
    Under **Services**, select **CryptoVerse**.
  </Step>

  <Step>
    Expand the company-specific applications CA by selecting the down arrow on the far right.
  </Step>

  <Step>
    Select **\[ Generate PKI ]**.
  </Step>

  <Step>
    Enter a **Name** and **Password** for the PKI, and select **\[ OK ]**.
  </Step>

  <Step>
    Expand the PKI you just generated to display information about the certificate. You should see details similar to the following image:

    <Frame caption="Certificate details">
      <img src="https://mintcdn.com/futurex-a224dff3/gi2ge3enxbvcbz2E/images/VirtuCrypt_Integrations/certificate_details.png?fit=max&auto=format&n=gi2ge3enxbvcbz2E&q=85&s=c6c3bba616eb088f8a2cadf8a735df23" alt="Certificate details" width="2498" height="1504" data-path="images/VirtuCrypt_Integrations/certificate_details.png" />
    </Frame>
  </Step>

  <Step>
    Select\*\*\[ Download PKCS #12 ]**, enter the PKCS #12 password, and select**\[ OK ]\*\*.
  </Step>

  <Step>
    Choose where you want to save the PKCS #12 file locally.
  </Step>
</Steps>

## Test the connection

To test the connection to the Advanced Metrics endpoint, run the following **cURL** command to confirm that you can successfully connect to your Advanced Metrics endpoint by using the TLS certificates in the PKCS #12 file:

```Plaintext wrap theme={null}
curl -k 'https\://us01crypto01test.virtucrypt.com:3126/api/v1/query' --cert-type P12 --cert Test\_App-Y96S6OJG.p12\:safest --data-urlencode 'query=ct\_instance\_service\_latency\_ms\{}' | jq
    % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                   Dload  Upload   Total   Spent    Left  Speed
  100   400    0   358  100    42   2546    298 --:--:-- --:--:-- --:--:--  2962
  \{
    "status": "success",
    "data": \{
      "resultType": "vector",
      "result": [
        \{
          "metric": \{
            "\_\_name\_\_": "ct\_instance\_service\_latency\_ms",
            "company\_name": "Futurex Demo Applications",
            "host": "austestcryptoguard02",
            "instance": "austestcryptoguard02-exporter:8000",
            "job": "vc-monitor",
            "region": "us-central-1",
            "tunnel\_name": "testapp1-VirtuCrypt Demo-1961"
          },
          "value": [
            1686941969.131,
            "0"
          ]
        }
      ]
    }
  }
```