PowerFlex 4.8: How to Enable Stringent Certificate Feature

요약: Many users have CA policies that prohibit IP addresses in the Certificate Subject Alternative Name (SAN) and only Fully Qualified Domain Names (FQDNs) are allowed. The lack of IP addresses in the certificate conflicts with PowerFlex Manager logic when it comes to the zipper or yum repositories that we use. PowerFlex 4.8 has a new feature to support stringent rules for certificates. This is a new security mode within package manager. Now, when creating a custom certificate or the Powerflex appliance certificate, the customer can choose between Standard and Stringent modes. The Standard Mode does not require DNS, but includes IPs and FQDNs, and the Stringent mode in which PowerFlex Manager converts the ingress IPS to FQDNs and then builds the repo URLs. ...

이 문서는 다음에 적용됩니다. 이 문서는 다음에 적용되지 않습니다. 이 문서는 특정 제품과 관련이 없습니다. 모든 제품 버전이 이 문서에 나와 있는 것은 아닙니다.
기타 리소스 확인

지침

  1. Access PowerFlex Manager UI> Settings> Security> Appliance  SSL Cetificate
  2. Select the option Generate Certificate Signing Request (CSR)

In the Appliance SSL Certificate, the Security Mode line shows if a customer is already using Stringent or Standard mode.

Appliance SSL Certificate 

  1. On the pop up, choose Stringent as the Security Level

Stringent" as the Security Level

  1. Add the DNS Hostname details:

 

Note: It is always recommended to include one DNS per entry; however, if this is not possible, the Management DNS can be used for the Data entries as well. If there are physically isolated OOB networks, a DNS entry on the OOB network is required to resolve the FQDN to the OOB ingress IP.

 

Note: Once the CSR is generated, do not deviate from what is in the Subject Alternative Name (SAN) Section; otherwise, the system shows an error when trying to upload the signed certificate in the Upload SSL certificate section.

 

CSR generated

  1. Upload the signed certificate. See article Powerflex 4.X: How to Sign and Upload a Chain of SSL Certificates to PFMP
  2. You can review the DNS hostnames associated with the certificate:

Review DNS hostnames associated with the certificate:  

해당 제품

PowerFlex rack, ScaleIO
문서 속성
문서 번호: 000479321
문서 유형: How To
마지막 수정 시간: 31 7월 2026
버전:  2
다른 Dell 사용자에게 질문에 대한 답변 찾기
지원 서비스
디바이스에 지원 서비스가 적용되는지 확인하십시오.