UNSOLVED
D
DavidRVanSandt
3 Posts
0
851
July 1st, 2014 12:00
CA Certificate without encryption
We have a PCI requirement to have a signed CA certificate installed for https access to DD. But, all I can find in the documentation is to enable encryption, add a passphrase, generating the CSR and importing. As far as I can see in all the docs I have read, this requires encryption at rest to be licensed and enabled. But, we don't want to encrypt the data at rest.
How do I generate the CSR and import the certificate and the cert chain without encrypting the DDFS?
DavidRVanSandt
3 Posts
344
0
Posted July 2nd, 2014 14:00
I figured out that I can add a pass phrase via the command line and generate the CSR without enabling encryption.
system passphrase set
adminaccess certificate generate cert-signing-request
[key-strength {1024bit | 2048bit | 4096bit}]
[country ] [state ] [city ]
[org-name ] [org-unit ]
[common-name ]
The GUI forces enabling encryption.
Now to get the provided certificate and CA chain into a form I can import.