Document obtaining CA bundle in a separate module

Author: aneta-petrova

guides/common/assembly_using-the-mcp-server-for-project.adoc

@@ -4,4 +4,6 @@ include::modules/con_using-the-mcp-server-for-project.adoc[]
 
 include::modules/con_overview-of-project-mcp-integration.adoc[leveloffset=+1]
 
+include::modules/proc_obtaining-the-location-of-the-ca-bundle-for-project.adoc[leveloffset=+1]
+
 include::assembly_generating-reports-by-using-the-mcp-server-for-project.adoc[leveloffset=+1]

guides/common/modules/proc_configuring-the-mcp-server-for-project.adoc

@@ -12,10 +12,8 @@ Perform these steps on the same system where your MCP client will run.
 ifdef::satellite[]
 * You are logged in to the registry.redhat.io container registry.
 endif::[]
-* The CA bundle for your {Project} is available on your system.
-If you are using the default self-signed {Project} certificate, the CA bundle is located at `_{foreman-example-com}_/pub/katello-server-ca.crt`.
-+
-If the MCP client runs on a system other than the {ProjectServer}, your {Project} administrator can download the CA bundle from the {ProjectServer} and transfer it to your system.
+* The certificate authority (CA) bundle for your {Project} is available on your system and you know its location.
+For more information, see xref:obtaining-the-location-of-the-ca-bundle-for-{project-context}[].
 
 .Procedure
 . Optional: Pull the latest version of the MCP container image from the registry:

guides/common/modules/proc_obtaining-the-location-of-the-ca-bundle-for-project.adoc

@@ -0,0 +1,27 @@
+[id="obtaining-the-location-of-the-ca-bundle-for-{project-context}"]
+= Obtaining the location of the CA bundle for {Project}
+
+[role="_abstract"]
+To deploy the MCP server for {Project}, the CA bundle for {Project} must be available on the system where the MCP server is being deployed.
+The CA bundle is the certificate of a CA which signed the certificate that is used to secure {ProjectWebUI}.
+
+Perform these steps on your {ProjectServer} or ask your administrator to perform them for you.
+
+.Procedure
+. Locate the CA bundle.
+For example, if you are using the default self-signed {Project} certificate, obtain the CA bundle location by inspecting the *SSLCACertificateFile* value in the `/etc/httpd/conf.d/05-foreman-ssl.conf` file:
++
+[options="nowrap", subs="+quotes,attributes"]
+----
+# cat /etc/httpd/conf.d/05-foreman-ssl.conf | awk -F '"' '/SSLCACertificateFile/ { print $2 }'
+----
++
+The default location is
+ifdef::katello,orcharhino,satellite[]
+`/etc/pki/katello/certs/katello-default-ca.crt`
+endif::[]
+ifdef::foreman-deb,foreman-el[]
+`/etc/puppetlabs/puppet/ssl/certs/ca.pem`
+endif::[]
+.
+. If you are deploying the MCP server on a system other than your {ProjectServer}, transfer the CA bundle to that system.