Convert PEM certificate file to CRT certificate file

[David_Purser]

Issue

Device Administrator requires CRT certificate file to add a certificate to CA Certificates.

Product Line

EcoStruxure Building Operation

Environment

• Building Operation Automation Server

Cause

If you rename the filetype from .pem to .crt and add via Device Administrator, the Automation Server will still present the following alarm:

Alarm Text: System alarm: unable to get local issuer certificate

System alarm ID: Invalid certificate for https communications

NOTE: The alarm will be known to have originated from the Automation Server because, in the Source field, the Automation Server will be the root, and the server it is connecting to will be the last.

Example: /AS01/System/Communication/Server Certificate/To/ES01

AS01 - Automation Server with the CA Certificate issue

ES01 - the EBO server which is was connected as client, which generated the alarm

Resolution

1. Reference this article to find OpenSSL installed: OpenSSL installed with EBO
2. Use and modify this command with your filenames: 

   openssl x509 -in ca.pem -out ca.crt​

3. Add the .crt certificate file via Device Administator's CA Certificates tab. Reference: CA Certificate Tab (WebHelp)