Is it true that Wildcards and 'standard' format keys cannot be applied to NMC?

[Anonymous user]

As titled. We would like to be able to apply a company wildcard certificate to an NMC but can see online that this is not supported? Could we get confirmation on this as I came across another forum post on here that mentioned a private tool that could push out wildcard certificates.

[BillP]

As of the release of APC Security Wizard 1.0.5, wildcards are supported.

[BillP]

The link below contains the executable for this version of the wizard:

https://schneider-electric.box.com/s/d8ozyclqpps87xyz5x5zayrq20bmqdji

[Anonymous user]

Thanks for that. Downloading it now.

I had already applied a standalone certificate on one of these but am getting trouble with Network Shutdown trusting the certificate. I have added the entire certificate chain in via the java keystore using the commands provided in one of your online guides and have confirmed that I can see all the certificates in the keystore. However I still get the problem. I do not want to instruct Network Shutdown to ignore certificate issues. Do you have any ideas? Not sure if it because the program tries to connect via IP address, instead of the hostname which the certificate is registered to.

Any help would be great...

[Terry_Kennedy_apc]

The NMC (AP9617/8/9 and embedded NM in products like the AP79xx, AP77xx, etc.) do an auto-rewrite to https://ip-address when SSL is enabled and you access them by name. So you either need to issue individual certificates with the IP address as the CN, or enter https://full-name-of-device in the browser address bar. If you do the second, be aware that you need to specify the domain as well, or you will get a hostname mismatch SSL error in your browser. This is a security feature enforced by your browser, not the NMC.

The NMC2 devices (at least in recent software versions) do not auto-rewrite to the https:// version of the device name, so for those you can specify the hostname (rather than IP address) in the certificate. You still have to specify the address with the full domain name, as above.

[Anonymous user]

Using a browser to connect to the NMC2 works fine and gives me no security warnings. The problem I have is that when adding the NMC2 into Network Shutdown, the communication fails due to a certificate error. This doesnt let me enter a hostname instead of an IP address. Is there a way to enter a hostname or am I doing something else wrong?

[Anonymous user · Accepted solution]

Just wanted to let people know... An upgrade of my NMC firmware seems to have fixed this? Not sure why.

[jabo35810]

where can I download APC Security Wizard 1.0.5? I only see 1.0.4. Thank you in advance.