The following error appears when trying to connect to the VNX using Unisphere UI:
Certificate Warning
The system can not be managed for the following reasons.
Certificate has invalid date
Unable to connect with Unisphere or Browser to the VNX.
The SP SSL certificate is expired which prevents HTTPS communication.
When you click the details of the certificate, you see that the certificate "valid to" date is expired.
- Change the time on your Laptop from time to be between the certificate's Valid from and Valid to time.
- Connect using Unisphere to the System, and select SPA properties.
- Change the SPA time to the current local time.
- Log in as administrator user like sysadmin to the array using:
https://SPA_IP/setup
- Select Manage SSL/TLS Certificate.
There are two possible scenarios here, either a self-signed certificate is in use or a CA-signed certificate is in use. The more common scenario is a self-signed certificate but either way works depending on the needs of the environment and whether or not there is a valid CA server that can sign the CSR generated in Unisphere.
(Option 1)
Generate a self-signed certificate (See article 11219 for more details on replacing a self-signed certificate-Must be a Dell Registered user):
- Click Generate a Self-Signed Certificate
(Option 2)
Create a customer signed CA cert (See article 103417 for more details on generating a self-signed certificate-Must be a Dell Registered user):
- Click Generate Certificate Signing Request (CSR).
- Once the signing request is created, have the user get the CSR signed by their CA server.
- Once the CSR is signed, it must be imported onto the SP. Go to Manage SSL/TLS Certificate
- Click Import Certificate
- Upload the certificate that the CA server signed.
Once the new certificate is in place, repeat the same steps on SPB, and then verify that Unisphere is now accessible.