SSL Certificate SubjectAlternateName and Bulk CSR Generation

[Anonymous user]

Using the APC Security Wizard I have been able to upload an enterprise signed SSL certificate successfully.  The FQDN for the UPS was set as the Common Name during the CSR generation.  When browsing to the UPS using the FQDN the secure connection is made and no errors are presented on IE or Chrome.  When browsing to the IP address of the UPS the browser present a warning about the mismatch in FQDN vs. IP.  Is there a way to add a SubjectAlternateName to the CSR during/after the APC Security Wizard CSR generation?  It appears that use of the SubjectAlternateName would allow for browsing to both the IP and FQDN.

As an aside, is there a means to use the APC Security Wizard to bulk generate the CSRs for multiple UPS?  

Would have preferred to use openssl for the CSR generation but have read about the incompatibility.

[BillP]

I don't believe we support the SubjectAlternateName or it'd be a field in the security wizard. I will see about logging it as an enhancement request for a future revision of the security wizard or whatever else we'd need to do on our end.

As far as the bulk generation, I can provide a version of the security wizard that allows wild card certificates and a tool that can FTP that to multiple devices in mass fashion. Is that what you're looking for - wild card certificates?

[Anonymous user]

Hi Angela.  Thanks for the response.  

The bulk CSR generation would avoid using the security wizard for each CSR but instead support a delimited list entry (csv or other means) to create the CSRs.  I'll try the wildcard approach and determine if that will satisfy our requirements.  The FTP tool appreciated as well.

Regards

Brennan

[BillP]

Hi Brennan,

An enhancement request already exists for the bulkCLI or .csv method of creating certs so I appended your request to it. I am still researching the SubjectAlternateName and what I can tell you about that in the short term and if we can support that some day. I also sent you a message with a link to the tools I do have today to offer.

[BillP · Accepted solution]

FYI ,  I will be adding  SubjectAlternateName  support where applicable to an enhancement request. It appears it will be feasible to support this as it stands now but it needs a little more investigation.