- apply - open /icingaweb2/setup in browser - fill in values from metadata - apply - make sure tls cert exists and is owned by nagios