How do I replace the NetBotz 250 self signed SSL Certificate with an Enterprise CA signed one?

[Anonymous user]

Hi,

I am trying to replace the self signed SSL certificate on a NetBotz 250 and the instructions in the 03/2021 User Guide on page 105 are severely lacking in useful detail. 😞

There is no option within the NetBotz 250 web UI to generate a new private key and CSR for signing by my Enterprise CA, so I used OpenSSL to generate them instead. I have signed the CSR with my Enterprise CA (Windows Server 2019 CA - using the 'Web Server' Template) and I now have a Base64 certificate.

Question 1: What is the supported file format to upload - as the "chose file" does not give any clues.

Question 2: How do I package the signed certificate and the private key?

Question 3: Should I be using the "APC Security Wizard" to upload the certificate/key pair to the NetBotz 250? If so, please can you confirm support version I should use?

Firmware/App Version:

Schneider Electric Network Management Card AOS v6.8.2
(c) Copyright 2019 All Rights Reserved NETBOTZ 250 APP v6.8.0

Thanks

Pin

[BillP]

Hi @PinPinPoola,

You should post Netbotz questions on the EcoStruxure IT Forum. I have added a link below.

https://community.se.com/t5/EcoStruxure-IT-forum/bd-p/ecostruxure-it-forum

[Anonymous user]

Hello @BillP 

Thank you for your reply.

Frustratingly, there is nothing I can see that makes it clear the NetBotz falls under the EcoStruxure IT Forum 😞

Are you able to move this post to the correct forum section for me please?

Many Thanks

Pin

[Anonymous user · Accepted solution]

<rant> I'll start by saying that I am disappointed in APC/Schneider for the inexcusably poor documentation on this subject. Whoever 'wrote' and signed off the 3/2021 NetBotz 250 User Guide should hang their collective heads in shame. You are supposedly professionals developing premium product, so please put more effort into the documentation. </rant>

After much searching I have worked out what page 105 "SSL Certificates" in the above mentioned guide should actually say.

This forum does not allow uploading of PDF's, so I have had to convert my PDF into PNG's in order to convey the steps needed. I will put the two NMCSecurityWizardCLI commands in as text at the bottom (after the white space of page #3)

NMCSecurityWizardCLI --csr -o apc-netbotz-250 -n apc-netbotz-250.mydomain.local -c GB -m "My County" -l "My Town" -g "My Organisation" -u "My Organisational Unit" -e myemail@mydomain.com -i https://apc-netbotz-250.mydomain.local -d apc-netbotz-250.mydomain.local -a 10.10.1.101 -k 2048

NMCSecurityWizardCLI --import -o apc-netbotz-250_p15cert -s apc-netbotz-250.cer -p apc-netbotz-250

[Rick_O]

Hello @Anonymous user ,

Thank you very much for the feedback and the information about your troubles, concerns, and also the solution for the Certificate issue you ran into. We will look into updating and adding more information to our documentation about this. Please keep the feedback coming as it helps us to improve our products and documentation.

Thanks,

Rick Ogren

NetBotz Product Manager