Dell EMC Unity: How to import an SSL certificate signed by a local Certificate Authority (User Correctable)

Summary: Error during import of a certificate signed by a local Certificate Authority.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Instructions

There is a procedure on how to replace Unisphere self-signed SSL certificates with signed certificates from a local Certificate Authority. See KB article 21122: Dell Unity: How to replace Unisphere self-signed SSL certificates with signed certificates from a local Certificate Authority. (User Correctable.) 

However, an error may happen when trying to install the new certificate:

service@SPB spb:~/user/mycerts> svc_custom_cert unitycert
ERROR: Certificate </tmp/cert.MIbZ4L/unitycert.crt> is invalid
 

The certificate must be base64 encoded before installing it. Use the Windows tool "certutil" to accomplish that.

Sample input:
Certutil -v -encode unitycert.crt unity64cert.crt

Sample output:
Input Length = 1520
Output Length = 2148
CertUtil: -encode command completed successfully.

 

 
Upload this encoded file as <unitycert_name>.crt to the storage processor and install it.
service@SPB spb:~/user/mycerts> svc_custom_cert unitycert
Successfully installed custom certificate files.
Restarting web server ...
7056\0x7f3c823d77c0:32:Module CIC/1.1.10.6 loaded

Additional Information

However sometimes, even after encoding the .crt file, svc_custom_cert still shows the below error:

ERROR: Certificate </tmp/cert.MIbZ4L/unitycert.crt> is invalid.


Here we can try the following:

  1. Per the KB article 21122: Dell Unity: How to replace Unisphere self-signed SSL certificates with signed certificates from a local Certificate Authority. (User Correctable), we may need both .pk and .crt files with same name (see Step 5.) Editing the encoded file with .pk file name help.

  2. If the error persists, backup all the files (.pk, .crt, and .csr) and remove them from the array. Re-create the .crt files following KB article 21122, and rename the signed encoded .csr file using command prompt to meet the above criteria, and then install it.

Affected Products

Dell EMC Unity Family
Article Properties
Article Number: 000019728
Article Type: How To
Last Modified: 18 Aug 2021
Version:  3
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.