Unisphere and Unisphere Central 2020 R1 Administrator's Guide

Configure a Custom SSL Certificate

Configure a custom SSL certificate to avoid certificate errors when connecting to the Data Collector. An SSL certificate is also required to communicate with a directory service using LDAP with the StartTLS extension or the LDAPS protocol.

1. Connect to the Data Collector.
   1. Open a web browser.
   2. Type the address of the Data Collector in the web browser using the following format:
      https://data_collector_host_name_or_IP_address:3033/
   3. Press Enter.
      The Unisphere Central login page is displayed.
   4. Type the user name and password of a Data Collector user with Administrator privileges in the User Name and Password field.
   5. Click Log In.
2. If a Storage Center is selected from the drop-down list in Unisphere Central, click (Home).
   The Unisphere CentralHome page is displayed.
3. Click Data Collector.
   The Data Collector view is displayed.
4. Click the General tab, and then click the Security subtab.
5. To generate SSL certificates:
   1. Click Generate Certificate.
      The Generate Certificate dialog box is displayed.
   2. Select the type of certificate to generate from the Certificate type drop-down menu.
      The options are:

      • All certificates - Generates Data Collector and VASA Provider certificates.
      • DSM Server - Generates Data Collector certificates.
      • VASA Server - Generates VASA Provider certificates.
   3. Select the new IP address or FQDN of the Data Collector from the Certificate Subject drop-down menu.
   4. If you are generating a VASA Provider certificate, type the username and password of a Data Collector user with Administrator privileges in the DSM User Name and Password fields.
   5. Click OK.
6. To upload registered SSL certificates, click Edit.
   The Register Certificate dialog box opens.
7. To upload a public key file.
   1. Click Choose File located to the right of the Public Key text.
   2. Browse to the location of the public key file, and then select it.
   3. Click Open.
      The Public Key field is populated with the path to the public key file.
8. To upload the private key file.
   1. Click Browse located to the right of the Private Key text.
   2. Browse to the location of the private key file, and then select it.
   3. Click Open.
      The Private Key field is populated with the path to the public key file.
9. Type the name of the entry in the PKCS #12 private key file to use as the private key in the In the Alias field.
10. Type the password for the private key file in the Password field.
11. Click OK.
    The Data Collector Restart dialog box opens.
12. Click Yes.
    The Data Collector service stops and restarts.