Avamar: Generer en forespørsel om sertifikatsignering (CSR) med Subject Alternative Name (SAN) som skal sendes til sertifiseringsinstansen (CA)

Summary: Bruk goav-verktøyet til å generere en forespørsel om sertifikatsignering (csr) som skal sendes til sertifiseringsinstansen for signering.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Instructions

Minimum Goav-versjon: 1,39

Last ned / installer Goav verktøyet

000192151 | Avamar: Goav-verktøy

Notat

Alle goav-sikkerhetskommandoer må kjøres som root.

Generer automatisk forespørsel om sertifikatsignering med Goav.

Det er tre alternativer tilgjengelig når du genererer CSR.

  1. goav security certificate csr
  2. goav security certificate csr --custom
  3. goav security certificate csr --custom --bits <keysize>



Alternativ 1

Generer en CSR med automatisk vertsnavngjenkjenning fra operativsystemet.

Kommando:

./goav security certificate csr

Goav henter det fullstendige domenenavnet (FQDN) og kortnavnet fra Avamar-serveren.
Dette oppretter en CSR med det fullstendige domenenavnet (FQDN) som fellesnavn på serveren, og to DNS SAN-oppføringer (Domain Name System) (FQDN og kortnavn).

Alternativ 2

Opprett en CSR med en egendefinert liste over vertsnavn.

Kommando:

./goav security certificate csr --custom

Goav ber deg om å angi FQDN du vil bruke for sertifikatet.
Goav ber deg om å angi en liste over flere vertsnavn som skal inkluderes i SAN.
Formålet med dette er å sørge for at en sertifikatforespørsel skal være gyldig for flere Avamar-servere, forutsatt at vertsnavnene er i SAN.

Alternativ 3

Generer en CSR med en bestemt nøkkellengde/-størrelse. 

Kommando:

./goav security certificate csr --bits 3072
./goav security certificate csr --custom --bits 4096

Når --bits-flagget ikke brukes, vil goav som standard ha en 2048-biters nøkkelstørrelse for det private/offentlige nøkkelparet som genereres.
Når du bruker --bits-flagget, kan du angi en sterkere nøkkelstørrelse, for eksempel 3072 eller 4096.

Resultater

Etter å ha kjørt kommandoen:
- To filer genereres i /home/admin/goav_certs/.
- Privat nøkkel lagret på / home / admin / goav_certs / webserver_key.key
- Den csr lagret til / home / admin / goav_certs / webserver_csr.csr
- Beleilig csr skrives ut på skjermen på slutten av kjøringen hvis du vil kopiere og lime inn for å sende til ca
- Den private nøkkelen som genereres vil være i PKCS1-format, du trenger ikke å konvertere senere hvis du installerer signerte websertifikater på Avamar.

Eksempler

Automatisk vertsnavn med nøkkelstørrelse angitt

root@ser-ave03:/home/admin/#: ./goav security certificate csr --bits 3072
===========================================================
GoAv    :        1.38
Avamar  :        19.7
Date    :        19 Oct 2022 08:55 MDT
===========================================================
NOTE: This is not an official tool
===========================================================
Generating Private Key & Certificate Signing Request
----------------------------------------------------
Operations Directory: /home/admin/goav_certs

2 Letter Country Code: US
Locale/State: Florida
City/Provice: Miami
Organization: Dell Technologies
Organizational Unit (OU): Avamar

2022/10/19 08:55:57 Processing distinguished name for subject portion of request
2022/10/19 08:55:57 Auto csr generation selected... pulling hostname info from server
2022/10/19 08:55:58 3072 bit key generated
2022/10/19 08:55:58 CSR generated with auto hostname selection

INFO
----
Web server private key saved: /home/admin/goav_certs/webserver_key.key
Web server signing request saved: /home/admin/goav_certs/webserver_csr.csr

** Copy the output below and send it to your CA for signing **

-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----


Valg av egendefinert vertsnavn

root@ser-ave03:/home/admin/#: ./goav security certificate csr --custom
===========================================================
GoAv    :        1.38
Avamar  :        19.7
Date    :        19 Oct 2022 08:57 MDT
===========================================================
NOTE: This is not an official tool
===========================================================
Generating Private Key & Certificate Signing Request
----------------------------------------------------
Operations Directory: /home/admin/goav_certs

2 Letter Country Code: US
Locale/State: Florida
City/Provice: Miami
Organization: Dell Technologies
Organizational Unit (OU): Avamar

2022/10/19 08:57:41 Processing distinguished name for subject portion of request
2022/10/19 08:57:41 Custom csr generation selected...

Hostname Section
----------------
Enter FQDN: ser-ave03.isus.emc.com
2022/10/19 08:57:44 FQDN added to Common Name in Subject
Enter an additional hostname (type 'q' to finish): ser-ave03
Enter an additional hostname (type 'q' to finish): ser-ave02.isus.emc.com
Enter an additional hostname (type 'q' to finish): ser-ave02
Enter an additional hostname (type 'q' to finish): q
2022/10/19 08:58:10 2048 bit key generated
2022/10/19 08:58:10 CSR generated with custom hostname list

INFO
----
Web server private key saved: /home/admin/goav_certs/webserver_key.key
Web server signing request saved: /home/admin/goav_certs/webserver_csr.csr

** Copy the output below and send it to your CA for signing **

-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----

Affected Products

Avamar
Article Properties
Article Number: 000204384
Article Type: How To
Last Modified: 03 Feb 2025
Version:  9
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.