Installing SSL on APC Smart-UPS SRT 6000

[Anonymous user]

Hello,

I'm trying to install SSL certificate on APC Smart-UPS SRT 6000VA RM but have some issues.
Should the file be a .pem file? And should it only contain the cert without any key/ca?

[BillP · Accepted solution]

Hi,

The SSL certificate goes on the UPS Network Management Card in the UPS.

You need to use the APC Security Wizard to create a Certificate Signing Request or import a signed certificate in a .p15 file format. Take a look at the security handbook for additional information regarding the different methods and options to install a third party SSL certificate (instead of using the internally generated/self signed certificate).

The security handbook is here which covers the detailed options and methods: http://www.apcmedia.com/salestools/LFLG-9VYK3D/LFLG-9VYK3D_R0_EN.pdf

The APC Security Wizard can be downloaded from here: http://www.apc.com/us/en/tools/download/ 

[mikeinnyc]

Updated and better way without downloading anything software.

Should the file be a .pem file? Yes and only that file (Self Signed as user!!! not Server)

Make sure you generate the SSL with the correct IP address or correct Host Name.

To recap and provide additional context for anyone else who might be doing a similar operation:

• Path to Install Certificate: As you've noted, the correct path in the APC interface is Configuration > Network > Web > SSL Certificate. This is where you can manage the SSL certificate settings.

• SSL Certificate Management Options: The interface allows you to add, replace, or remove a security certificate. SSL (Secure Socket Layer) is essential for encrypting data between a web browser and the server, enhancing the security of the connection.

• Status Indications: The interface provides status updates such as 'Valid certificate', 'Certificate not installed', 'Generating', and 'Loading', each indicating a different stage or state of the SSL certificate on the NMC.

• Default Certificate Generation: If an invalid certificate is installed or if no certificate is loaded while SSL is enabled, the NMC generates a default certificate. This process might delay access to the interface for a short period.

• Adding or Replacing a Certificate File: The interface allows you to browse and upload the certificate file created with the Security Wizard, ensuring that the certificate is installed to the correct location on the NMC.

• Reference Material: For detailed instructions, the APC Security Handbook available on the Network Management Card Utility CD offers comprehensive guidance. This resource is especially useful for understanding the nuances of creating and installing digital certificates.

• Reboot only the network card after updating the Certificate.

URL Update: After installing the SSL certificate, the URL to access your APC NMC should change from http:// to https://. For example, if your previous URL was http://[Your-APC-IP-Address], it should now be https://[Your-APC-IP-Address].

You should be good to go but don't forget to limit port 80 access.

Web Access

HTTP

Enable