How to fetch the CSR generated on Data Domain Management Center

Question

Hello, In my corporation we have strict rules about https, and attempt to browse services protected by unrecognized or untrusted source is prevented Through the CLI, we managed to create a certificate signing request but we didn't find any guideline on how to fetch this request and feed it to our PKI. Since the appliance is a stripped down version of DDOS, nfs export or cifs share are unavailable. We've tried FTP, FTPS, SCP , but all those  protocol are failing to fetch the text file located at : /ddvar/certificates/CertificateSigningRequest.csr so to resume we are looking for ways: To fetch that file Sign the request with our PKI Copy the answer back to the appliance Finish the  signing request workflow, and configure the https service with the signed version Deactivate http and keep only the secure version

SandrinoCostant · Accepted Answer

Well I've finally found why SCP was not working

The root of the issue was in our SSH client suite of tools. (Putty/WinSCP)

The interactive session was working flawlessly :

So, we were unaware of any incompatibilities between the client and the sshd daemon on the appliance:

--> Winscp , pscp, etc are all failing to transfer the file:

But the same transfer from a linux client is working :

--> the rest of the workflow was successful

adminaccess certificate import host application https file signed-certificate.pem

ble1 · Answer

You should move you question to Data Domain forum for appropriate audience.

cb1ocker · Answer

Thank you for posting this solution, I've been trying to get an answer to this same exact question from support for over a week.

Data Domain

Was this post helpful?