Welcome to the new Schneider Electric Community

It's your place to connect with experts and peers, get continuous support, and share knowledge.

  • Explore the new navigation for even easier access to your community.
  • Bookmark and use our new, easy-to-remember address (community.se.com).
  • Get ready for more content and an improved experience.

Contact SchneiderCommunity.Support@se.com if you have any questions.

Close
Invite a Co-worker
Send a co-worker an invite to the Exchange portal.Just enter their email address and we’ll connect them to register. After joining, they will belong to the same company.
Send Invite Cancel
84599members
353868posts

SSL Certificate SubjectAlternateName and Bulk CSR Generation

APC UPS Data Center & Enterprise Solutions Forum

Schneider Electric support forum for our Data Center and Business Power UPS, UPS Accessories, Software, Services, and associated commercial products designed to share knowledge, installation, and configuration.

Solved
bdownes_apc
Crewman
Crewman
0 Likes
4
398

SSL Certificate SubjectAlternateName and Bulk CSR Generation

This was originally posted on APC forums on 1/21/2015


Using the APC Security Wizard I have been able to upload an enterprise signed SSL certificate successfully.  The FQDN for the UPS was set as the Common Name during the CSR generation.  When browsing to the UPS using the FQDN the secure connection is made and no errors are presented on IE or Chrome.  When browsing to the IP address of the UPS the browser present a warning about the mismatch in FQDN vs. IP.  Is there a way to add a SubjectAlternateName to the CSR during/after the APC Security Wizard CSR generation?  It appears that use of the SubjectAlternateName would allow for browsing to both the IP and FQDN.

As an aside, is there a means to use the APC Security Wizard to bulk generate the CSRs for multiple UPS?  

Would have preferred to use openssl for the CSR generation but have read about the incompatibility.

Tags (4)

Accepted Solutions
BillP
Administrator Administrator
Administrator
0 Likes
0
398

Re: SSL Certificate SubjectAlternateName and Bulk CSR Generation

This reply was originally posted by Angela on APC forums on 1/27/2015


FYI ,  I will be adding  SubjectAlternateName  support where applicable to an enhancement request. It appears it will be feasible to support this as it stands now but it needs a little more investigation.

See Answer In Context

4 Replies 4
BillP
Administrator Administrator
Administrator
0 Likes
0
398

Re: SSL Certificate SubjectAlternateName and Bulk CSR Generation

This reply was originally posted by Angela on APC forums on 1/21/2015


I don't believe we support the SubjectAlternateName or it'd be a field in the security wizard. I will see about logging it as an enhancement request for a future revision of the security wizard or whatever else we'd need to do on our end.

As far as the bulk generation, I can provide a version of the security wizard that allows wild card certificates and a tool that can FTP that to multiple devices in mass fashion. Is that what you're looking for - wild card certificates?

bdownes_apc
Crewman
Crewman
0 Likes
0
398

Re: SSL Certificate SubjectAlternateName and Bulk CSR Generation

This was originally posted on APC forums on 1/22/2015


Hi Angela.  Thanks for the response.  

The bulk CSR generation would avoid using the security wizard for each CSR but instead support a delimited list entry (csv or other means) to create the CSRs.  I'll try the wildcard approach and determine if that will satisfy our requirements.  The FTP tool appreciated as well.

Regards

Brennan

BillP
Administrator Administrator
Administrator
0 Likes
0
398

Re: SSL Certificate SubjectAlternateName and Bulk CSR Generation

This reply was originally posted by Angela on APC forums on 1/22/2015


Hi Brennan,

An enhancement request already exists for the bulkCLI or .csv method of creating certs so I appended your request to it. I am still researching the SubjectAlternateName and what I can tell you about that in the short term and if we can support that some day. I also sent you a message with a link to the tools I do have today to offer.

BillP
Administrator Administrator
Administrator
0 Likes
0
399

Re: SSL Certificate SubjectAlternateName and Bulk CSR Generation

This reply was originally posted by Angela on APC forums on 1/27/2015


FYI ,  I will be adding  SubjectAlternateName  support where applicable to an enhancement request. It appears it will be feasible to support this as it stands now but it needs a little more investigation.