Dell EMC Unity: How to import an SSL certificate signed by a local Certificate Authority (User Correctable)

Samenvatting: Error during import of a certificate signed by a local Certificate Authority.

Dit artikel is van toepassing op Dit artikel is niet van toepassing op Dit artikel is niet gebonden aan een specifiek product. Niet alle productversies worden in dit artikel vermeld.

Instructies

There is a procedure on how to replace Unisphere self-signed SSL certificates with signed certificates from a local Certificate Authority. See KB article 21122: Dell Unity: How to replace Unisphere self-signed SSL certificates with signed certificates from a local Certificate Authority. (User Correctable.) 

However, an error may happen when trying to install the new certificate:

service@SPB spb:~/user/mycerts> svc_custom_cert unitycert
ERROR: Certificate </tmp/cert.MIbZ4L/unitycert.crt> is invalid

 

The certificate must be base64 encoded before installing it. Use the Windows tool "certutil" to accomplish that.

Sample input:
Certutil -v -encode unitycert.crt unity64cert.crt

Sample output:
Input Length = 1520
Output Length = 2148
CertUtil: -encode command completed successfully.

 

 
Upload this encoded file as <unitycert_name>.crt to the storage processor and install it.
service@SPB spb:~/user/mycerts> svc_custom_cert unitycert
Successfully installed custom certificate files.
Restarting web server ...
7056\0x7f3c823d77c0:32:Module CIC/1.1.10.6 loaded

Extra informatie

However sometimes, even after encoding the .crt file, svc_custom_cert still shows the below error:

ERROR: Certificate </tmp/cert.MIbZ4L/unitycert.crt> is invalid.


Here we can try the following:

  1. Per the KB article 21122: Dell Unity: How to replace Unisphere self-signed SSL certificates with signed certificates from a local Certificate Authority. (User Correctable), we may need both .pk and .crt files with same name (see Step 5.) Editing the encoded file with .pk file name help.

  2. If the error persists, backup all the files (.pk, .crt, and .csr) and remove them from the array. Re-create the .crt files following KB article 21122, and rename the signed encoded .csr file using command prompt to meet the above criteria, and then install it.

Getroffen producten

Dell EMC Unity Family
Artikeleigenschappen
Artikelnummer: 000019728
Artikeltype: How To
Laatst aangepast: 18 aug. 2021
Versie:  3
Vind antwoorden op uw vragen via andere Dell gebruikers
Support Services
Controleer of uw apparaat wordt gedekt door Support Services.