MSA2050 - How to get a proper certificate from Microsoft CA

[LaurentP]

Hi, 
I can't find how to change HTTPS certificate from MSA controller, replacing the self signed cert by a Microsoft Certificate Authority trusted cert.
To get a certificate from my CA, i need a certificate request and I can't find how to generate this CSR.

the only thing I did is creating another self signed custom certificate from the MSA CLI but it is still shown as unsecure cert.

Thanks

[SUBHAJIT KHANBARMAN_1]

You will have to work with you CA to create the customer certificates that will be specific to your domain. HPE cannot provide you those custom certificates.

Please refer to the SMU Guide for general instructions for installation of the certificates.

A detailled blog post on this : https://storcom.com/installing-ca-ssl-certificates-on-hpe-msa-array/

1) Request a certificate at your CA manager, it will be probably delivered as a .pfx file

2) Extract the .pfx file into two separate PEM files

- The certificate .cer file

- The private .key file (exported with a pass phrase)

3) Decrypt/Remove the passphrase from the .key file

4. Edit the .cer file you extracted at step 2) and add your company's intermediate certificate and the root certificate. The final .cer file should look like:

1. -----BEGIN CERTIFICATE-----
   Array’s certificate
   -----END CERTIFICATE-----
2. -----BEGIN CERTIFICATE-----
   The intermediate certificate chain
   -----END CERTIFICATE-----
3. -----BEGIN CERTIFICATE-----
   The ROOT CA certificate
   -----END CERTIFICATE-----

5. Upload the .cer and the private .key file

put <certificate file name> cert-file

put <key file> cert-key-file

Hope this helps.

Hope this helps!
Regards
Subhajit

I am an HPE employee

If you feel this was helpful please click the KUDOS! thumb below!

**********************************************************************

[SUBHAJIT KHANBARMAN_1]

Can you please help us to understand if the issue got resolved or not?

If issue got resolved then how?

Also request you to mark the forum as resolved if there is no more outstanding query from your end on this issue.

This will help for everyone who are all following your forum.

Hope this helps!
Regards
Subhajit

I am an HPE employee

If you feel this was helpful please click the KUDOS! thumb below!

**********************************************************************

[LaurentP]

Sorry but I don't understand.

how can I get a certificate from my certificate authorithy without providing it a certificate request ?

[SUBHAJIT KHANBARMAN_1]

@LaurentP .......this forum is only for MSA related queries but your request specific to CSR generation from Microsoft. However you can follow the below links which may help you,

https://www.thesslstore.com/knowledgebase/ssl-generate/csr-generation-guide-for-microsoft-iis8/

https://docs.microsoft.com/en-us/skypeforbusiness/help-topics/help-depwiz/certificate-request-certificate-signing-request

https://knowledge.digicert.com/solution/SO29005.html

https://www.sonicwall.com/support/knowledge-base/how-to-obtain-a-certificate-from-a-windows-certificate-authority-ca/170503319041199/

Hope this helps!
Regards
Subhajit

I am an HPE employee

If you feel this was helpful please click the KUDOS! thumb below!

************************************************************************

[SUBHAJIT KHANBARMAN_1]

Can you please help us to understand if the issue got resolved or not?

If issue got resolved then how?

Also request you to mark the forum as resolved if there is no more outstanding query from your end on this issue.

This will help for everyone who are all following your forum.

Hope this helps!
Regards
Subhajit

I am an HPE employee

If you feel this was helpful please click the KUDOS! thumb below!

********************************************************************************

[Dardan]

Hi LaurentP,

Not sure if there's been an update on this, but here you'll find a great step-by-step procedure on how to implement SSL certificates on MSA:

https://storcom.com/installing-ca-ssl-certificates-on-hpe-msa-array/

Hope this helps.

Cheers,
Dardan