Install custom certificate on OME without CSR

Hello,

As far as I know, creating a CSR outside of the appliance is not supported. When the certificate is installed on the appliance, keychain verification is required. I think authentication fails because the appliance's private key is not used during CSR generation.

Also, I checked if there is a workaround for this but as far as I searched I couldn't find it. While digging, I encountered this, in case it might help others, I'd like to share it. Custom SSL Cert Using Microsoft Certificate Authority https://dell.to/2VxcNAr

Hope this will help!

Hi Erman,

Thanks for the quick response!, I was afraid for this answer

Can you raise a feature request for this functionality?, it's fairly common to be able to import a PFX/PKCS12 (with key/crt/ca) into a solution.

For example, the Dell idrac does supports this without any issues.

Seems like it's a really easy to implement feature that would help a lot of folks out in similar positions.

For now i guess i'm stuck with the default self signed certificate.

Kind regards,

Peter

Hi Peter,

Sure I'm on it. I know there is some restriction on OME when compare with iDRAC for certificates. I'm not certain why these restrictions are on OME. 

Regards,

This is also an issue when trying to pass Qualys Scans for Government Compliance as the QID says a certificate needs to be signed by a trusted third-party Certificate Authority.

It is a bit frustrating dealing with large companies, DELL isn't the only one, that have a difficult time working with certificates.  It's as if security is an after thought even in this day and age.

Is there any solution to this? We want to generate the csr outside of ome , just like how we do  for other servers

Hi @CSK12,

After checking out the user guide for the latest OME, it seems the feature has not been implemented. I may suggest to call into support to create a case for feature request to be developed. 

Hi, @DELL-Joey C, 

Good day,

I am also seeking information about a particular feature. Currently, I am using OME Version 4.0.0 (Build 202), and I am encountering difficulties uploading my certificate into OME. Could you please provide any updates or guidance on this matter?

Thank you.

Hi,

Can you provide more details about the error you encountered and what steps have you taken or how you reproduce the error? What features that you're seeking information about?