Dell Unity, VNX: Unisphere Certificate Warning - The security certificate presented by this website was not issued by a trusted certificate authority
Summary: How to stop warning message about security certificate when accessing CS through Unisphere using Internet Explorer.
Symptoms
When a user connects to Unisphere in Internet Explorer with a self-signed certificate on the CS, the following message is seen:
There is a problem with this website's security certificate. The security certificate presented by this website was not issued by a trusted certificate authority. Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server. We recommend that you close this webpage and do not continue to this website.
Cause
When a user tries to access using Unisphere, a Certificate Security Warning is received because the CS is using a Self-Signed Certificate.
Resolution
VNX/VNX2:
-
Access the CS over SSH and display the certificate using the following command:
nas_ca_certificate -display
-
Copy the certificate information at the bottom between and including the lines that say BEGIN CERTIFICATE and END CERTIFICATE.
Example:-----BEGIN CERTIFICATE----- MIIDxDCCAqygAwIBAgIFEkdlQkUwDQYJKoZIhvcNAQEFBQAwODEiMCAGA1UEChMZ Vk5YIENlcnRpZmljYXRlIEF1dGhvcml0eTESMBAGA1UEAxQJZW1jbmFzX2kwMB4X DTE0MDcyMzA2MjQ1N1oXDTE5MDcyOTA2MjQ1N1owODEiMCAGA1UEChMZVk5YIENl cnRpZmljYXRlIEF1dGhvcml0eTESMBAGA1UEAxQJZW1jbmFzX2kwMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oLfkmIAmA3t21hXdqOyuD/4Wh0/Qjsy Rs6Z4bMAlNs1e2gmj6wZAIz7tJedoIj5GoqAKghzORJf0ehD3Vb3ofETixOQde5f 0+UeN2R6+KX6TOul0mrM2Hr5uf+g+Dt8dDNmrKSBueXklGRtWZs6ZaK1zucR/QSc 1Uvyo1/hXGkTSnQWT5FioMzzB3bmT3cExDJr5TlptkupaJ+m/IHd4MJzKlGl+uyx 7/rq1AXezrqcWtAndQ97/Xasag6545656dfasfasfasdlBj9feVtDTwlXOjKLIe1iYAs64 5MEcmE7xBT7PCRwqfbcUe7zSATtEU5ot/XD9vEjmjbBXh7yqXPDFfQIDAQABo4HU MIHRMB0GA1UdDgQWBBSyK2MExYUFtlFVM7mTFSJYSd08DDBkBgNVHSMEXTBbgBSy K2MExYUFtlFVM7mTFSJYSd08DKE8pDowODEiMCAGA1UEChMZVk5YIENlcnRpZmlj YXRlIEF1dGhvcml0eTESMBAGA1UEAxQJZW1jbmFzX2kwggUSR2VCRTAMBgNVHRME BTADAQH/MDwGA1UdEQxxxxxxxxxxxxxxxxxpMIIVZW1jbmFzX2kwLmxvY2FsZG9t YWlugg8xMjguMjIxLjI1Mi4xMDAwDQYJKoZIhvcNAQEFBQADggEBAKcwKzJ1In1t u4hudSsUF3FT7fjEreZk2cVI7+87q1hWeKYEAnNr6qPjDsryzq/rJXfcp8Mrgpoj IeCJ/rmwgjDIfa8ib34ODUInzu065ei7rfHWP5AXFz5V6b9fQmKF75P7K3c3VaJ2 J1y2ekkzg+3Km5o+wbzS4lTp9JJuk25bvtznNO4KEQM0R3/eBCYfeZctB7pO/ogo zsnVLZfeWSJwos8LWylJCHuTfDAsT5tytNhvxhcdQ6Q493+enT0Rp5gEpoWoag8k FJgpZ7SwNhc4U469ExxxxxxxxxxxxxxxxxWF+G+8dX/U7+9v6gJFWmkXDsQomxr0 mMJW3nHENg8= -----END CERTIFICATE-----
-
Create a notepad document and paste certificate information.
-
Save the notepad document with .sst extension.
-
Import Certificate into Internet Explorer.
- Go to Tools.
- Click Internet Options.
- Click the Content tab.
- Click the Certificates button.
- Click the Trusted Root Certification Authorities tab.
- Click the Import button
- Click Next button
- Browse for the .sst file that was created.
- Click Next button
- Ensure that there is a dot in "Place all certificates in the following store"
- Certificate store should show "Trusted Root Certification Authorities"
- Click Next button
- Click Finish button
- Click Yes button on the Security Warning window
- Click OK on The import was successful.
- Click Close on the Certificates window
- Click OK on Internet Options
-
Close out of Internet Explorer then reopen and access CS again and the warning should not display.
UNITY:
Internet Explorer
- Open Unity array to login screen
- Click Certificate Error
- Click View certificates
- Click "Details" Tab
- Click Copy to File… Button
- Click Next Button
- Leave "DER encoded" selected
- Click Next Button
- Select Location and name
- Click Next Button
- Click Finish Button
- Click OK Button on "The export was successful." window
- Click OK Button on the Certificate window
- Click Settings
- Click Internet Options
- Click "Content" Tab
- Click Certificates Button
- Click "Trusted Root Certification Authorities" tab
- Click Import Button
- Click Next Button
- Browse to Certificate and Select
- Click Next Button
- Select "Place all certificates in the following store" (Trusted Root Certification Authorities)
- Click Next Button
- Click Finish Button
- Click Yes on Security Warning
- Click OK on "The import was successful." window
- Click Close Button
- Click OK Button
- Close Browser Window
- Reopen Browser to Unity array
Chrome
- Open Unity array to login screen
- Click Not Secure
- Click "Invalid" under Certificate
- Click "Details" Tab
- Click Copy to File… Button
- Click Next Button
- Leave "DER encoded" selected
- Click Next Button
- Select Location and name
- Click Next Button
- Click Finish Button
- Click OK Button on "The export was successful." window
- Click OK Button on the Certificate window
- Click Chrome Menu Button (three vertical dots)
- Click Settings"
- Scroll Down and click Advanced
- Click Manage Certificates
- Click Import Button
- Click Next Button
- Browse to Certificate and Select
- Click Next Button
- Select "Place all certificates in the following store" (Trusted Root Certification Authorities)
- Click Next Button
- Click Finish Button
- Click Yes on Security Warning
- Click OK on "The import was successful." window
- Click Close Button
- Close Browser Window
- Reopen Browser to Unity array