Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

Dell PowerVault ME5 Series Administrator's Guide

Installing a security certificate

The storage system supports use of unique certificates for secure data communications, to authenticate that the expected storage systems are being managed. Use of authentication certificates applies to the HTTPS protocol, which is used by the web server in each controller module.

As an alternative to using the CLI to create a security certificate on the storage system, you can use FTP/SFTP to install a custom certificate on the system. A certificate consists of a certificate file and an associated key file. The certificate can be created by using OpenSSL, for example, and is expected to be valid. If you replace the controller module in which a custom certificate is installed, the partner controller will automatically install the certificate file to the replacement controller module.

NOTE Details pertaining to certificates:
  • By default, the system generates a unique SSL certificate for each controller. When using FTP/SFTP to install certificates, you must explicitly install the certificate to the controller for which the session applies. For example, you cannot install a certificate to controller B during an FTP/SFTP session with controller A. You cannot install a certificate to both controllers from a given session: the installation tasks are discrete.
  • The supported file format for certificates is PEM (Privacy-Enhanced Mail) encoded only.
  • Supported certificate versions are x.509 v1 and v3. Avoid using unsupported versions of certificates.
  • Extensions are supported if uploading certificates through FTP/SFTP. However, extensions are not supported if adding certificates using the create certificate CLI command.
  • Variable key lengths are supported if uploading certificates through FTP/SFTP. However, a fixed key length of 2048 bits applies if adding certificates using the create certificate CLI command.

Two uploader roles are supported:

  • The usr role is the default role for use by the client.
  • The mfg role is reserved for use in engineering mode only.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\