- Community Home
- >
- Storage
- >
- HPE Nimble Storage
- >
- Array Setup and Networking
- >
- Problem with Custom certificate installation
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-12-2017 11:52 PM
тАО01-12-2017 11:52 PM
I have made an update from a Nimble Array CS215 to software version 3.6.1.0-419853-opt.
With this version, I can create a custom certificate.
I make the following steps, according to Command Reference version 3:
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Step 1:
create CSR:
cert --gen custom-csr --subject '/C=X/ST=X/L=X/O=X/OU=X/CN=FQDN' --dnslist FQDN,DomainName --iplist IPAddress
I make the CN=FQDN, not the Array Name
I make a costum certificate with the csr output.
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Step 2:
Download CA Certificate from our CA Certificate Server and install it on the nimble with:
Nimble OS $ cert --import custom-ca
Please enter certificate in PEM format followed by ^D:
-----BEGIN CERTIFICATE-----
MIIG...
...
...
BhQQ==
-----END CERTIFICATE-----Nimble OS $
Output from cert --list:
...
custom-ca: (Pending) /DC=X/DC=X/DC=X/CN=X
...
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Step 3:
Install signed certificate from step 1:
Nimble OS $ cert --import custom
Please enter certificate in PEM format followed by ^D:
-----BEGIN CERTIFICATE-----
MIIHcj...
...
...9iFRs=
-----END CERTIFICATE-----ERROR: Keystore(PKCS12) file creation failed: unable to load certificates
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Why I can not install the signed certificate from the csr?
Solved! Go to Solution.
- Tags:
- certificate
- keystore
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-13-2017 09:47 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-13-2017 11:34 AM
тАО01-13-2017 11:34 AM
Re: Problem with Custom certificate installation
Hi Moshe,
That was the solution.
Many thanks for the the straight tip.
Thanks,
Mario
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-07-2017 06:48 AM
тАО04-07-2017 06:48 AM
Re: Problem with Custom certificate installation
Hi I already have a signed wildcard SSL that I want to use, but when I tried to import it says no custom CSR file exists. I guess I have to create a CSR. But when I created the CSR then it says CRS mismatch when trying to import the wildcard SSL. Is wild card SSL supported?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-12-2017 03:43 AM
тАО04-12-2017 03:43 AM
Re: Problem with Custom certificate installation
Hi Jason, wild card is not supported with the admin commands as the CSR needs to be validated, this can't be done with a wild card.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-13-2017 09:13 AM
тАО04-13-2017 09:13 AM
Re: Problem with Custom certificate installation
Hello,
are Wildcard certs that include the FQDN as an SNI supported?
I can create copies of our wildcard certs with specific hosts included (from DigiCert), so our cert would effectively include
example.com,
*.example.com,
nimble.example.com
Alternatively, are there plans to add support for wildcards in the future?