Cisco DCNM: How to enable HTTPS on Linux server post install

Configuring Certificates for Cisco Prime DCNM:
A decision must be made on how you want to configure the SSL certificate, there are several options:

• Using a self-signed SSL Certificate
• Using an SSL Certificate when a certificate request is generated using OpenSSL
• Using an SSL Certificate when a certificate request is generated using Keytool

For the purposes of this KB, we use self-signed SSL certificate:
Using a self-signed SSL Certificate.

Step 1
From the command prompt, browse to the following:
<DCNM install root>/dcm/java/jre1.7/bin/

Step 2
Rename the keystore located at:
<DCNM_install_root>\dcm\jboss-as-7.2.0.Final\standalone\configuration\fmserver.jks
to
<DCNM_install_root>\dcm\jboss-as-7.2.0.Final\standalone\configuration\fmserver.jks.old

Step 3
Generate a self-signed certificate using following command.

keytool -genkey -trustcacerts -keyalg RSA -alias sme -keystore
<DCNM_install_root>\dcm\jboss-as-7.2.0.Final\standalone\configuration\fmserver.jks -storepass
fmserver_1_2_3 -validity 360 -keysize 2048

Actual syntax used for this example:

keytool -genkey -trustcacerts -keyalg RSA -alias sme -keystore /usr/local/cisco/dcm/jboss-as-7.2.0.Final/standalone/configuration/fmserver.jks -storepass fmserver_1_2_3
-validity 360 -keysize 2048

Step 4
Stop the DCNM services, or DCNM application by using the following command.

appmgr stop dcnm

Step 5
Start the DCNM services, or the DCNM applications in the server by using the following command.

appmgr start dcnm

Reconfigure DCNM Web port:
Perform the following steps to reconfigure the DCNM web port.

Step 1:
Stop DCNM server using "appmgr stop dcnm."
For DCNM 7.2.3, also stop the LAN and SMIS components if they are in use with the following command:

appmgr stop dcnm
appmgr stop dcnm-lan
appmgr stop dcnm-smis

Step 2
To configure the DCNM Web port, use the following command.

appmgr update dcnm -h true|false

-h true: Start DCNM Web UI on https(default 443) port.
-h false: Start DCNM Web UI on http(80) port.

Step 3
Start DCNM server.
For DCNM 7.2.3, also start the LAN and SMIS components if they are in use with the following command:

appmgr start dcnm
appmgr start dcnm-lan
appmgr start dcnm-smis

Verify whether the DCNM server is listening on port 80 (HTTP) or 443(HTTPS)

# netstat -ant | grep 80
# netstat -ant | grep 443