EcoStruxure IT forum
Schneider Electric support forum about installation and configuration for DCIM including EcoStruxure IT Expert, IT Advisor, Data Center Expert, and NetBotz
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-03 08:18 AM . Last Modified: 2024-04-08 03:55 AM
i have customer that would like to use their own ssl cert, part of that process requires generating a certificate signing request. DCE already has a wizard in place to do this. Is there something similar in DCO? or if possible, can someone provide the commands to use with openssl in the linux backend?
(CID:110005865)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-03 08:18 AM . Last Modified: 2024-04-08 03:55 AM
Hi Andrew Trabert, thanks for posting. Lets see who can be of assistance here. @community any ideas? Kind regards Ditte
(CID:110006088)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-03 08:18 AM . Last Modified: 2024-04-08 03:55 AM
Hi Andrew
Have you had a look at the following?
https://dcimsupport.apc.com/display/public/UADCO8x/Changing+SSL+certificate+on+the+server
Many thanks
Martin
(CID:110006178)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-03 08:18 AM . Last Modified: 2024-04-08 03:55 AM
Hi Martin, Yes I've seen that page, however that still doesn't provide any info on how to generate a signing request. The whole reason we need the CSR is because their security scan software flagged the DCO server for using a self-signed certificate. DCE has a whole wizard for generating the CSR Modifying the SSL certificate and I've seen some documentation online on how to generate a CSR using the CLI and openssl. However I'm looking for some official supported documentation/procedure on how to use openssl to generate the CSR or some other method.
(CID:110006194)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-03 08:18 AM . Last Modified: 2024-04-08 03:55 AM
This website will contain the information you require, https://www.openssl.org/
(CID:110006200)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-03 08:18 AM . Last Modified: 2024-04-08 03:55 AM
I'm sure it does and I know it's not that difficult. However given that the wrong ssl cert can break access to the server, if possible, I'm looking for a supported procedure from SE instead of trying to figure it out myself.
(CID:110006201)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-03 08:18 AM . Last Modified: 2024-04-08 03:55 AM
here's the response i got from tech support.
log into the linux backend and run the command
"sudo openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr"
then use winscp or the upload/download function of the webmin console to download the server.csr file.
after that you can generate your ssl cert and import it following SE standard ssl cert import process
(CID:114822492)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-03 08:19 AM . Last Modified: 2023-10-22 01:34 AM
This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.
Link copied. Please paste this link to share this article on your social media post.
Create your free account or log in to subscribe to the board - and gain access to more than 10,000+ support articles along with insights from experts and peers.