VxRail: How to Apply for a New Certificate For VxRail Manager

There is a SolVe procedure to replace SSL certificate on VxRail Manager, which requests customer to prepare new SSL certificate files and related files from CA.
This article contains some help on how to apply for these files.

1. Usually, customer must get a Certificate Signing Request (CSR) file. This is a brief introduction about how to generate CSR using OpenSSL.
2. Customer must send the CSR file to CA for the new certificate, root certificate chain file, etc. It is the customer's responsibility to obtain the new certificate and root certificate chain. Work with the CA service provider to get them.
3. Some CA provide the certificate chain in Base-64 format (.p7b file), while the "openssl pkc12" command in SolVe only take crt file format as input. So we must convert the p7b file to a crt file with the following command.

   openssl pkcs7 -print_certs -in <old.p7b> -out <new.crt>
   	

4. Similarly, some CA provide the certificate file DER format, and we must convert it to PEM format with the following command

   openssl x509 -inform der -in <old_certificate.cer> -out <new_certificate.crt>
   	

Note: If VxRail Manager's cert is expired, and VxRail plugin UI cannot display correctly, download cert_util.py from 000077894, and run it with argument '-r':  
# python cert_util.py -r
After plugin works as normal, apply new certificate in VxRail plugin.

Customer has to prepare the information needed in a CSR, e.g. 

   - Distinguished Name (DN) as VxRail Manager FQDN
   - Business name / Organization
   - Department Name / Organizational Unit
   - Town/City
   - Province, Region, County or State
   - Country
   - An email address (optional)
   - Subject Alternative Name (SAN) including VxRail Manger DNS name and IP address (optional)