Help
  • Explore Community
  • Get Started
  • Ask the Community
  • How-To & Best Practices
  • Contact Support
Notifications
Login / Register
Community
Community
Notifications
close
  • Forums
  • Knowledge Center
  • Events & Webinars
  • Ideas
  • Blogs
Help
Help
  • Explore Community
  • Get Started
  • Ask the Community
  • How-To & Best Practices
  • Contact Support
Login / Register
Sustainability
Sustainability

Join our "Ask Me About" community webinar on May 20th at 9 AM CET and 5 PM CET to explore cybersecurity and monitoring for Data Center and edge IT. Learn about market trends, cutting-edge technologies, and best practices from industry experts.
Register and secure your Critical IT infrastructure

Uploading Private SSL Certificates

APC UPS Data Center & Enterprise Solutions Forum

Schneider, APC support forum to share knowledge about installation and configuration for Data Center and Business Power UPSs, Accessories, Software, Services.

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
  • Home
  • Schneider Electric Community
  • APC UPS, Critical Power, Cooling and Racks
  • APC UPS Data Center & Enterprise Solutions Forum
  • Uploading Private SSL Certificates
Options
  • Subscribe to RSS Feed
  • Mark Topic as New
  • Mark Topic as Read
  • Float this Topic for Current User
  • Bookmark
  • Subscribe
  • Mute
  • Printer Friendly Page
Invite a Co-worker
Send a co-worker an invite to the portal.Just enter their email address and we'll connect them to register. After joining, they will belong to the same company.
You have entered an invalid email address. Please re-enter the email address.
This co-worker has already been invited to the Exchange portal. Please invite another co-worker.
Please enter email address
Send Invite Cancel
Invitation Sent
Your invitation was sent.Thanks for sharing Exchange with your co-worker.
Send New Invite Close
Top Experts
User Count
BillP
Administrator BillP Administrator
5060
voidstar_apc
Janeway voidstar_apc
196
Erasmus_apc
Sisko Erasmus_apc
112
TheNotoriousKMP_apc
Sisko TheNotoriousKMP_apc
108
View All

Invite a Colleague

Found this content useful? Share it with a Colleague!

Invite a Colleague Invite
Solved Go to Solution
Back to APC UPS Data Center & Enterprise Solutions Forum
Solved
Anonymous user
Not applicable

Posted: ‎2021-06-30 05:07 AM . Last Modified: ‎2024-03-08 03:12 AM

0 Likes
120
39522
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:07 AM . Last Modified: ‎2024-03-08 03:12 AM

Uploading Private SSL Certificates

For years now, many individuals have been asking to upload their private Secure Sockets Layer (SSL) Certificates to their Network Management Cards (NMC):

  • https://community.se.com/t5/APC-UPS-Data-Center-Enterprise/bd-p/datacenter-forum
  • https://community.se.com/t5/APC-UPS-Data-Center-Enterprise/bd-p/datacenter-forum
  • https://community.se.com/t5/APC-UPS-Data-Center-Enterprise/Can-t-Import-SSL-Cert-Into-NMC/td-p/33241...
  • https://community.se.com/t5/APC-UPS-Data-Center-Enterprise/Installing-SSL-on-APC-Smart-UPS-SRT-6000/...
  • https://community.se.com/t5/APC-UPS-Data-Center-Enterprise/bd-p/datacenter-forum

Some of these forums are older than a decade of individuals asking how to upload their private SSL certificates. After around of month of talking to support staff and researching the topic, there does not seem to be any resolution to this issue. In my last support case, Jeff Bill said that he would pass my case to the (Presumably Software) Engineers for review. I am creating this thread to show that this change will benefit not only myself but also others that use the Schneider Eclectic array of products. Please reply with why you would be in support of this change.

My Why:
Uploading a private SSL to our MNC's will allow for a more cohesive Information Technology (IT) environment. The change will eliminate the annoying security warning that appears when attempting to log into the NMC's and strengthen a security posture within a given IT environment. Because of the versatility of modern SSL certificates (Ex. a Wildcard certificate that covers numerous sub-domains), there is no reason that the NMC should be locked down in this modern era.

My question is, when should we expect to see this change be implemented?

Labels
  • Labels:
  • UPS Management Devices & PowerChute Software
  • Tags:
  • certificates
  • information
  • NMC
  • security
  • ssl
  • upc
Reply

Link copied. Please paste this link to share this article on your social media post.

  • All forum topics
  • Previous Topic
  • Next Topic
Replies 120
  • « Previous
    • 1
    • 2
    • 3
  • Next »
Anonymous user
Not applicable

Posted: ‎2021-06-30 05:12 AM . Last Modified: ‎2024-03-08 03:05 AM

0 Likes
0
11637
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:12 AM . Last Modified: ‎2024-03-08 03:05 AM

I have been following this thread and many others and have been experiencing the same issues while using a Microsoft PKI. I would like to try the 1.0.0 version of the CLI utility but the link appears to be removed. Would it be possible to get a new link to it?

Reply

Link copied. Please paste this link to share this article on your social media post.

BillP
Administrator BillP Administrator
Administrator

Posted: ‎2021-06-30 05:12 AM . Last Modified: ‎2024-03-08 03:05 AM

0 Likes
0
11637
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:12 AM . Last Modified: ‎2024-03-08 03:05 AM

Yeah sure, this link has an expiry of 31/12/2020.

https://schneider-electric.box.com/s/ct021cml940zdj50al4zhocjyczf13v8

I'll go back and update my previous links too.

-Gavan

Reply

Link copied. Please paste this link to share this article on your social media post.

Anonymous user
Not applicable

Posted: ‎2021-06-30 05:12 AM . Last Modified: ‎2024-03-08 03:05 AM

0 Likes
0
11639
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:12 AM . Last Modified: ‎2024-03-08 03:05 AM

Gavan 

Hi mate,

Do you have any advice on this or could you direct me towards where I could download the APC Security Wizard? I cannot find it anywhere. 

Many thanks!

Reply

Link copied. Please paste this link to share this article on your social media post.

Anonymous user
Not applicable

Posted: ‎2021-06-30 05:12 AM . Last Modified: ‎2024-03-08 03:04 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:12 AM . Last Modified: ‎2024-03-08 03:04 AM

On 9/7/2020 4:22 AM, Gavan said:

Yeah sure, this link has an expiry of 31/12/2020.

https://schneider-electric.box.com/s/ct021cml940zdj50al4zhocjyczf13v8

I'll go back and update my previous links too.

-Gavan

Thanks, ver 1.0.0 worked without issue. Was able to apply a cert to both of my Galaxy units.

Reply

Link copied. Please paste this link to share this article on your social media post.

BillP
Administrator BillP Administrator
Administrator

Posted: ‎2021-06-30 05:12 AM . Last Modified: ‎2024-03-08 03:04 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:12 AM . Last Modified: ‎2024-03-08 03:04 AM

Try this:

https://schneider-electric.box.com/s/s54qucbvxbe9qrd32vrqrwkre31e1uaz

-Gavan

Reply

Link copied. Please paste this link to share this article on your social media post.

Anonymous user
Not applicable

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:04 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:04 AM

Aww gez. Sorry I went dark there. Got totally distracted on other projects. Gavan, mind sharing that link again? 

Cheers!

Reply

Link copied. Please paste this link to share this article on your social media post.

BillP
Administrator BillP Administrator
Administrator

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:04 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:04 AM

No worries:

https://schneider-electric.box.com/s/n6gplu3huj8b8laicqtephlcjophgc7k

Good for another week.

-Gavan

Reply

Link copied. Please paste this link to share this article on your social media post.

Anonymous user
Not applicable

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:01 AM

0 Likes
1
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:01 AM

Hi Gavan,

Just spent hours trying to set up https/ssl but always ran into the following error with version 1.0.1 of NMCSecurityWizardCLI from the website:

Unhandled Exception:
cryptlib.CryptException: -3: Bad argument, parameter 3
[...]

Guessing from the former posts I might need the alternative program version of your last posts... but unfortunately all links are no longer valid:(

Could you please share it again?

Thank you very much,
Sven

Reply

Link copied. Please paste this link to share this article on your social media post.

BillP
Administrator BillP Administrator
Administrator

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:01 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:01 AM

Hi Sven,

Those links should still be valid they don't expire until the 31/12/20, maybe try again:

https://schneider-electric.box.com/s/ct021cml940zdj50al4zhocjyczf13v8

The other thing to note is that the -3 error can be causes if the DNS name is less that 7 characters long, it should be an FQDN anyways so it shouldn't be to hard to make it longer than 7.

-Gavan 

Reply

Link copied. Please paste this link to share this article on your social media post.

Anonymous user
Not applicable

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:01 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:01 AM

Hi Gavin,

Thank you very much! It worked like a charm with the alt. binary.

Kind regards,
Sven

Reply

Link copied. Please paste this link to share this article on your social media post.

DKGame_apc
Crewman DKGame_apc
Crewman

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:01 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:01 AM

I'm also having issues on a new 9640 NMC 3 running the latest firmware.

Pretty much all of our other UPSs have NMC 2 in, and this procedure works fine for those...

1) Generate CSR with NMCSecurityWizardCLI e.g.:

NMCSecurityWizardCLI --csr -o Certs\\ -n . -c GB -m Norfolk -l Gorleston -g "James Paget University Hospitals Trust" -e -i https://domain.name -d -a -k 2048

2) Then I take the CSR file from stage 1 and in the web interface of our Cert Authority, request a new signed cert.  This then downloads a .cer file which I move to the same folder as the CSR and original P15 generated in stage 1.

3) Then run NMCSecurityWizardCLI to merge the original P15 and CER files to a -pub .p15 file which gets uploaded to the NMC.

NMCSecurityWizardCLI --import -o Certs\\-pub -s Certs\\.cer -p Certs\\

I then use the Web interface of the NMC to import the new SSL cert.  it uploads, and shows in the console if I look into the contents of /ssl, however even though it states "Valid Certificate" - when I click on that link in the NMC, it shows me the self-signed one again.

It only fails like this on this new NMC3 running 1.4.2.1 but the older NMC2 cards with 6.9.6 on work fine.

Anyone got any ideas?

Reply

Link copied. Please paste this link to share this article on your social media post.

BillP
Administrator BillP Administrator
Administrator

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:00 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:00 AM

Hi David,

If you upload a text file with the exact command used to create the cert (with the actual value), the unsigned .p15 file, the CSR, the cer/crt response from your CA and the signed .p15 to the folder below I can have a look for you:

https://schneider-electric.app.box.com/f/f0022147b18c4fc897394c8c654f9407

-Gavan

Reply

Link copied. Please paste this link to share this article on your social media post.

tonyc_apc
Ensign tonyc_apc
Ensign

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:00 AM

0 Likes
0
42340
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:00 AM

Hi Gavan,

     I am having the same issue.  I have used the NMC utility to generate a CSR and p15 key, then signed the cert with our CA, then used the NMC utility to import the cert and p15 key file and create a p15 cert file.  When I run this I get the following error:

Unhandled Exception: cryptlib.CryptException: -3: Bad argument, parameter 3
at NMCSecurityWizardCLI.Program.ImportSignedCSR(String sCertFile, String sKeyFile, String sOutFile)
at NMCSecurityWizardCLI.Program.Main(String[] args)

Can you tell me what is going wrong here?

Thank you for any help,

Tony

Reply

Link copied. Please paste this link to share this article on your social media post.

DKGame_apc
Crewman DKGame_apc
Crewman

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:00 AM

0 Likes
0
11637
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:00 AM

You need to ensure you're using version 1.0 of the tool. 1.1 doesn't work!  I had the same issue when I first started doing this.

With regards to my issue - it was odd but the certificate "took" after the 3rd or 4th attempt at uploading it to the NMC.. I suspect a software issue!

Reply

Link copied. Please paste this link to share this article on your social media post.

tonyc_apc
Ensign tonyc_apc
Ensign

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:00 AM

0 Likes
0
11637
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:00 AM

Thank you, where can I find v1.0 ?

 

Tony

Reply

Link copied. Please paste this link to share this article on your social media post.

tonyc_apc
Ensign tonyc_apc
Ensign

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:00 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:13 AM . Last Modified: ‎2024-03-08 03:00 AM

All the previous drop box links to v1.0 are expired Gavan can you put it out there again please??? 

 

Thank you,
Tony

Reply

Link copied. Please paste this link to share this article on your social media post.

tonyc_apc
Ensign tonyc_apc
Ensign

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 03:00 AM

0 Likes
0
11637
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 03:00 AM

Hello Gavan,  could you please post the links to ver 1.0.0 of the NMC utility again?

thank you,
Tony

Reply

Link copied. Please paste this link to share this article on your social media post.

Anonymous user
Not applicable

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 03:00 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 03:00 AM

I'd also very much like to have v1.0.0

I got ever so slightly closer to a working certificate with v1.0.1 but it seems I'm at a total loss without rolling back to v1.0.0

Reply

Link copied. Please paste this link to share this article on your social media post.

ScottBUK
Ensign ScottBUK
Ensign

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 03:00 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 03:00 AM

If there are no objections then I don't mind putting v1.0.0 up somewhere.

Reply

Link copied. Please paste this link to share this article on your social media post.

ScottBUK
Ensign ScottBUK
Ensign

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 02:59 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 02:59 AM

Mods I will remove if requested, but to help people out who are having difficulty I've stuck v1.0.0 on Google Drive:

https://drive.google.com/file/d/1r9BUkOnJsdjhqE1h3VqDTk7ptsr6PpUl/view?usp=sharing

 

Reply

Link copied. Please paste this link to share this article on your social media post.

Anonymous user
Not applicable

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 02:59 AM

0 Likes
0
11637
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 02:59 AM

Cheers Scott - nice one 🙂 I'll let you all know how I get on

Reply

Link copied. Please paste this link to share this article on your social media post.

tonyc_apc
Ensign tonyc_apc
Ensign

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 02:59 AM

0 Likes
0
11637
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 02:59 AM

Yes thank you Scott, we don't need a .dll file along with the exe you uploaded do we?

Reply

Link copied. Please paste this link to share this article on your social media post.

ScottBUK
Ensign ScottBUK
Ensign

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 02:59 AM

1 Like
0
11637
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 02:59 AM

Ah yes, forgot cryptlib. Reuploaded with both:

https://drive.google.com/file/d/1tspu3Nf-wtqvp0CKnvAfiSB0PgYsadES/view?usp=sharing

Reply

Link copied. Please paste this link to share this article on your social media post.

tonyc_apc
Ensign tonyc_apc
Ensign

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 02:59 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 02:59 AM

great, thank you!

Reply

Link copied. Please paste this link to share this article on your social media post.

Anonymous user
Not applicable

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 02:59 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 02:59 AM

Oh I just renamed the .exe to something else and used the dll files from v1.0.1, turns out they are inter-operable. 

v1.0.0 worked for me, just got my first cert signed and loaded on the UPS so just a another 30 odd to do but very happy there is a solution!!

Cheers all!

Reply

Link copied. Please paste this link to share this article on your social media post.

BillP
Administrator BillP Administrator
Administrator

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 02:59 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 02:59 AM

Hey All,

Sorry I was on leave, here a new link for future reference:

https://schneider-electric.box.com/s/2vetd44vxp24j9dudcsupro52xjbq4dl

-Gavan

Reply

Link copied. Please paste this link to share this article on your social media post.

tonyc_apc
Ensign tonyc_apc
Ensign

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 02:58 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 02:58 AM

Thank you everyone!  Version 1.0 was the trick to getting it to work! 

Tony

Reply

Link copied. Please paste this link to share this article on your social media post.

tonyc_apc
Ensign tonyc_apc
Ensign

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 02:58 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:14 AM . Last Modified: ‎2024-03-08 02:58 AM

Hi Gavan,

Now I am having trouble getting a cert to load on a SmartUPS-1500 with a NMC2 card.  I am able to create the .p15 cert ok, after I upload it in the webui, it just keeps saying "loading certificate"  eventually the default cert gets regenerated but it keeps saying "loading certificate" until I reboot the nmc.  What am I doing wrong?

Tony

Reply

Link copied. Please paste this link to share this article on your social media post.

ScottBUK
Ensign ScottBUK
Ensign

Posted: ‎2021-06-30 05:15 AM . Last Modified: ‎2024-03-08 02:58 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:15 AM . Last Modified: ‎2024-03-08 02:58 AM

Have you checked if the date/time are correct on the UPS?

Reply

Link copied. Please paste this link to share this article on your social media post.

tonyc_apc
Ensign tonyc_apc
Ensign

Posted: ‎2021-06-30 05:15 AM . Last Modified: ‎2024-03-08 02:58 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:15 AM . Last Modified: ‎2024-03-08 02:58 AM

Hi Scott,

   yeh I have it connected to our ntp server 😕  I saw your earlier post about time and was hoping that was it , but no unfortunately.  

thank you,
Tony

Reply

Link copied. Please paste this link to share this article on your social media post.

tonyc_apc
Ensign tonyc_apc
Ensign

Posted: ‎2021-06-30 05:15 AM . Last Modified: ‎2024-03-08 02:58 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:15 AM . Last Modified: ‎2024-03-08 02:58 AM

GMhoJVcxfqwP1PkgCihFnQ%3D%3D.pngGMhoJVcxfqwP1PkgCihFnQ%3D%3D.png

This is what I get every time I tried to upload a new cert to any of my 9630 NMC2 cards running 6.4.0 or 6.9.6, doesn't matter what version.  Same cert works fine on my 9640 NMC3 card.  Help!

Thank you,
Tony

Attachments
Reply

Link copied. Please paste this link to share this article on your social media post.

BillP
Administrator BillP Administrator
Administrator

Posted: ‎2021-06-30 05:15 AM . Last Modified: ‎2024-03-08 02:44 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:15 AM . Last Modified: ‎2024-03-08 02:44 AM

Hmm, if it works fine on your NMC3 cards but not your NMC2 cards then it might be to do with the security used.

The NMC2 supports certificates up to SHA256RSA, 2048 bit key length and no intermediate certificates.

I can review them if you'd like? Just upload the the unsigned .p15 file, the CER/CRT response from your CA, the signed .p15 file and a text file with the commands you used to the link below:

https://schneider-electric.app.box.com/f/9eb2a0a65ead4f40991eada42446358d

-Gavan

Reply

Link copied. Please paste this link to share this article on your social media post.

tonyc_apc
Ensign tonyc_apc
Ensign

Posted: ‎2021-06-30 05:15 AM . Last Modified: ‎2024-03-08 02:44 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:15 AM . Last Modified: ‎2024-03-08 02:44 AM

Hi Gavan,  sorry for the late response I had other issues happening that I had to address.  When I look at the certificate that was generated in the chain there are 2 certs,  our Root CA(which is turned off) and our Sub CA which actually signed it.  So I assume this sort of setup wouldn't work?  RCA-->SCA-->Cert ?

Thank you,
Tony

Reply

Link copied. Please paste this link to share this article on your social media post.

BillP
Administrator BillP Administrator
Administrator

Posted: ‎2021-06-30 05:15 AM . Last Modified: ‎2024-03-08 02:44 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:15 AM . Last Modified: ‎2024-03-08 02:44 AM

It depends, sometimes you can edit the CER/CRT, file remove the intermediate cert and everything will work.

  1. Open it in notepad
  2. Remove everything before -----BEGIN CERTIFICATE-----
  3. Remove everything after -----END CERTIFICATE-----
  4. Save
  5. Create a new .p15 file by combining the modified cer/crt with the original .p15 file
  6. Upload and test
Reply

Link copied. Please paste this link to share this article on your social media post.

tonyc_apc
Ensign tonyc_apc
Ensign

Posted: ‎2021-06-30 05:15 AM . Last Modified: ‎2024-03-08 02:43 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:15 AM . Last Modified: ‎2024-03-08 02:43 AM

Hi Gavan,

So I looked at the signed cert I got from our SCA and in it there is only one entry "begin cert" then "end cert".  When I look at the cert using windows it shows this as the chain:

uL78Igy7R4aq6mLwHV%2BezA%3D%3D.pnguL78Igy7R4aq6mLwHV%2BezA%3D%3D.png

top being our RCA the middle the SCA and then the actual cert on the bottom.  I also checked its using Sha256rsa.  Any other thoughts?  Thank you for your help!!

Tony

Attachments
Reply

Link copied. Please paste this link to share this article on your social media post.

BillP
Administrator BillP Administrator
Administrator

Posted: ‎2021-06-30 05:15 AM . Last Modified: ‎2024-03-08 02:43 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:15 AM . Last Modified: ‎2024-03-08 02:43 AM

If you want to upload all the files I requested earlier to the box link I can have a more detailed look.

-Gavan

Reply

Link copied. Please paste this link to share this article on your social media post.

Anonymous user
Not applicable

Posted: ‎2021-06-30 05:16 AM . Last Modified: ‎2024-03-08 02:43 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:16 AM . Last Modified: ‎2024-03-08 02:43 AM

We're generating CSR's and private key's using NMC Security.
The CSR's are being sent to our in-house Microsoft CA.
The CA signed cert and the original private key from the CSR generation are imported using NMC Security.
Attempting to upload and apply the certificate returns "no certificate installed".

Model Number: AP7723

Version: v3.9.2

Reply

Link copied. Please paste this link to share this article on your social media post.

tonyc_apc
Ensign tonyc_apc
Ensign

Posted: ‎2021-06-30 05:16 AM . Last Modified: ‎2024-03-08 02:43 AM

0 Likes
0
11638
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:16 AM . Last Modified: ‎2024-03-08 02:43 AM

Hi Gavan,

    I wanted to let you know that once I switched to a 2 year certificate from a 5 year template the NMC2 card accepted the certificate.  As far as I can tell that was the only difference between the 2 cert templates on our MS CA server.  Our NMC3 card will accept the 5 year certificate though!  Go figure!

Tony

Reply

Link copied. Please paste this link to share this article on your social media post.

Anonymous user
Not applicable

Posted: ‎2021-06-30 05:16 AM . Last Modified: ‎2024-03-08 02:43 AM

0 Likes
0
11643
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:16 AM . Last Modified: ‎2024-03-08 02:43 AM

Hey, Did you finally get an answered? I'm having the same issue and is very frustrating. 

  • Tags:
  • nmc2
  • ups
Reply

Link copied. Please paste this link to share this article on your social media post.

tonyc_apc
Ensign tonyc_apc
Ensign

Posted: ‎2021-06-30 05:16 AM . Last Modified: ‎2024-03-08 02:43 AM

0 Likes
0
11643
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:16 AM . Last Modified: ‎2024-03-08 02:43 AM

Yes, 2 things that I needed to know 1) you need version 1.0 of their nmcli wizard to convert your cert to p15 format.  2) if you are using NMC2 cards make sure the cert you generate is 2 years, if NMC3 5 year is ok.   Thats about all I know, but at least it got the certs installed on my management cards!  HTH

Tony

Reply

Link copied. Please paste this link to share this article on your social media post.

Anonymous user
Not applicable

Posted: ‎2021-06-30 05:16 AM . Last Modified: ‎2024-03-08 02:43 AM

0 Likes
0
11643
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:16 AM . Last Modified: ‎2024-03-08 02:43 AM

I upgraded the UPS to 6.9.6, and use the 1.0 NSW CLI, The process for generate the key runs smooth and confirm the p15 generate successful but when I try to upload to UPS takes forever.

 

QqjGP4Un2KPIXG0fLvf5kw%3D%3D.pngQqjGP4Un2KPIXG0fLvf5kw%3D%3D.png

iKwdotKELh0k6EOnr7gjmg%3D%3D.pngiKwdotKELh0k6EOnr7gjmg%3D%3D.png

Attachments
Reply

Link copied. Please paste this link to share this article on your social media post.

tonyc_apc
Ensign tonyc_apc
Ensign

Posted: ‎2021-06-30 05:16 AM . Last Modified: ‎2024-03-08 02:43 AM

0 Likes
0
11643
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:16 AM . Last Modified: ‎2024-03-08 02:43 AM

What is the length of the cert you created on your CA?

Reply

Link copied. Please paste this link to share this article on your social media post.

tonyc_apc
Ensign tonyc_apc
Ensign

Posted: ‎2021-06-30 05:16 AM . Last Modified: ‎2024-03-08 02:43 AM

0 Likes
0
11643
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:16 AM . Last Modified: ‎2024-03-08 02:43 AM

Let me clarify,  was it a 1 year 2 year, 3 year etc?

Reply

Link copied. Please paste this link to share this article on your social media post.

Anonymous user
Not applicable

Posted: ‎2021-06-30 05:16 AM . Last Modified: ‎2024-03-08 02:43 AM

0 Likes
0
11643
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:16 AM . Last Modified: ‎2024-03-08 02:43 AM

Is Two Year, length the Key I'm using is 2048.

Reply

Link copied. Please paste this link to share this article on your social media post.

tonyc_apc
Ensign tonyc_apc
Ensign

Posted: ‎2021-06-30 05:16 AM . Last Modified: ‎2024-03-08 02:43 AM

0 Likes
0
11643
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:16 AM . Last Modified: ‎2024-03-08 02:43 AM

Ok,  NMC2 or NMC3 management card?

Reply

Link copied. Please paste this link to share this article on your social media post.

Anonymous user
Not applicable

Posted: ‎2021-06-30 05:16 AM . Last Modified: ‎2024-03-08 02:42 AM

0 Likes
0
11643
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:16 AM . Last Modified: ‎2024-03-08 02:42 AM

Is a NMC2 integrated to the UPS.

Reply

Link copied. Please paste this link to share this article on your social media post.

Anonymous user
Not applicable

Posted: ‎2021-06-30 05:17 AM . Last Modified: ‎2024-03-08 02:42 AM

0 Likes
3
11643
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:17 AM . Last Modified: ‎2024-03-08 02:42 AM

I have installed 30+ certs on NMC2 cards, AP9630 without any issues.  We have started to move to NMC3, AP9640, cards and can't seem to get a cert to load.  Used the exact same process:

  1. Create .CSR file using NMCSecurityWizard v1.0.0
    • NMCSecurityWizardCLI --csr -o timtestsignreq -n device-1.company.com -c US -l "Some City" -g "Companiy" -u "Team Name" -e email@company.com -a 192.168.0.20 -i https://device-1 -d device-1
  2. Go to our internal Cert Auth and create cert using the .csr file dropping everything before and after the Begin and End Cert
  3. Copy .CER to the same folder as the .p15 created in Step 1 above and run the following
    • NMCSecurityWizardCLI --import -o upsnewcert -s device-1.cer -p timtestsignreq
      • Results log show it completed without error
  4. Login to UPS and attempt to upload the upnewcert.p15 file
    • It spins for a few seconds and the completes
    • Check the Cert, it is still the self-generated APC cert
  5. SSH to the UPS and the /ssl folder contains the upsnewcert.p15 file

Any idea why the it does not seem to recognize the cert in the ssl folder?

Reply

Link copied. Please paste this link to share this article on your social media post.

BillP
Administrator BillP Administrator
Administrator

Posted: ‎2021-06-30 05:17 AM . Last Modified: ‎2024-03-08 02:42 AM

0 Likes
0
11643
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:17 AM . Last Modified: ‎2024-03-08 02:42 AM

Hi Tim,

Upload the cert via the NMC web interface, the usual way.

Then, can you try to SSH to the NMC3 and issue this command?

ssl key -i ssl/certificate-name.p15

Once you have done the above, run this command to see if the cert is loaded correctly.

ssl cert -s

Please let me know how this goes for you.

Reply

Link copied. Please paste this link to share this article on your social media post.

Anonymous user
Not applicable

Posted: ‎2021-06-30 05:17 AM . Last Modified: ‎2024-03-08 02:42 AM

0 Likes
0
11643
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:17 AM . Last Modified: ‎2024-03-08 02:42 AM

That did it!  Thank you!

Reply

Link copied. Please paste this link to share this article on your social media post.

Anonymous user
Not applicable

Posted: ‎2021-06-30 05:17 AM . Last Modified: ‎2024-03-08 02:42 AM

0 Likes
0
11643
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-06-30 05:17 AM . Last Modified: ‎2024-03-08 02:42 AM

7h2pUi1mDhA%2FSk6l7I1LJw%3D%3D.png7h2pUi1mDhA%2FSk6l7I1LJw%3D%3D.png

This is what I get every time I tried to upload a new cert  NMC2 cards running  6.9.6, doesn't matter what version.   Help!

Thank you,

Attachments
Reply

Link copied. Please paste this link to share this article on your social media post.

Preview Exit Preview

never-displayed

You must be signed in to add attachments

never-displayed

 
  • « Previous
    • 1
    • 2
    • 3
  • Next »
To The Top!

Forums

  • APC UPS Data Center Backup Solutions
  • EcoStruxure IT
  • EcoStruxure Geo SCADA Expert
  • Metering & Power Quality
  • Schneider Electric Wiser

Knowledge Center

Events & webinars

Ideas

Blogs

Get Started

  • Ask the Community
  • Community Guidelines
  • Community User Guide
  • How-To & Best Practice
  • Experts Leaderboard
  • Contact Support
Brand-Logo
Subscribing is a smart move!
You can subscribe to this board after you log in or create your free account.
Forum-Icon

Create your free account or log in to subscribe to the board - and gain access to more than 10,000+ support articles along with insights from experts and peers.

Register today for FREE

Register Now

Already have an account? Login

Terms & Conditions Privacy Notice Change your Cookie Settings © 2025 Schneider Electric

This is a heading

With achievable small steps, users progress and continually feel satisfaction in task accomplishment.

Usetiful Onboarding Checklist remembers the progress of every user, allowing them to take bite-sized journeys and continue where they left.

of