Adding SSL Certificate to Celerra

Question

We are trying to remediate some audit scan issues and found that our Celerra show up in scans. Some items we around SSL Certs.

SSL Certificate - Self-Signed Certificate

SSL Certificate - Improper Usage Vulnerability

SSL Certificate - Signature Verification Failed Vulnerability

When I spoke to a tech briefly, his response was, “I was not able to locate a way to load a signed certificate in the Celerra GUI, that would mean that you would need to load the certificate like you would on any other apache server.“

Has anyone done this?

How does one go about getting the cert onto the Celerra and then installing it?

Rainer_EMC · Answer

See the Security Configuration Guide on VNX™ for File manual under Configuring PKI on how generate / install certificates

Rainer_EMC · Answer

Sound like a time problem Check the date on the cert and your system date

Jeffey1 · Answer

Reboot the Control Station.
Set the Windows workstation PC Clock ahead to a time slightly before the "Valid From" date in the details of the Certificate.

OR

If you do not have access to the Unisphere Certificate Warning message, you can verify the "Valid From" date by accessing the Control Station console, examining the following file, and setting the PC clock ahead of the "Not Before" date indicated:

# cat /nas/site/CA/ca_certificate.pem
Certificate:
    -----edited----
        Issuer: O=Celerra Certificate Authority, CN=emcnas_i0
        Validity
            Not Before: Mar 16 12:49:14 2011 GMT
            Not After : Mar 21 12:49:14 2016 GMT
Alternatively, verify that all the system times on the PC Client & the VNX Control Station match, move all the /nas/http/conf/ssl.crt files from the ssl.crt directory, and then reissue the CA Certificate:

# /nas/sbin/nas_ca_certificate -generate

Note: The start date of the new certificate should be equal to seven (7) days before the current system date, and reflected in GMT time.

Celerra

Adding SSL Certificate to Celerra

Was this post helpful?