UNSOLVED

ikroumov

updated

3 years ago

I

ikroumov

1 Rookie

5 Posts

0

18625

November 5th, 2018 08:00

Replace DellEMC OpenManage Enterprise self signed certificat

Hello

I have deployed DellEMC OpenManage Enterprise 3.0 build 990 into the environment.

One of the security requirements is to have the self signed certificate to be replaced with a real certificate.

 What i did so far, without any success is being generated on external Linux machine:

1. I generated 2048 key 

2. Generated a configuration file which has these configuration parameters. (Server specific names and Identifiers have been removed)

[ req ]
default_bits = 2048
distinguished_name = req_distinguished_name
encrypt_key = no
prompt = no
string_mask = nombstr
req_extensions = v3_req

[ v3_req ]
basicConstraints = CA:FALSE
keyUsage = digitalSignature, keyEncipherment, dataEncipherment
extendedKeyUsage = serverAuth, clientAuth
subjectAltName = xxx

 

3. Received the cer file and extracted the servers cert  (1.cer), the intermediate cert (2.cer) and the root cert (3.cer) into Base64 format

4. On the external linux machine i compiled a file with the command

cat 1.cer initial_key_2048.key 2.cer 3.cer > all.cer

5. When I try to upload the "all.cer" file on the DOME machine I am getting an error:

OpenManage Enterprise

Error occurred while uploading SSL certificate

  • CSEC9002 - Unable to upload the certificate because the certificate file provided is invalid.

 

So far I have not been able to find any information into the documentation where I can read what are the required configuration steps, certificate type, etc in regards what DOME requires.

Is there any verified set of steps / certificate format tested out there where the exact steps required to replace the certificate are documented.

I have opened a support request with DellEMC support, however the support team is not very helpful 

Thank You