Hitachi Virtual Storage Platform F400, System Administrator Manual

Page: 150 / 368

requirements. Use of this certificate results in higher reliability in exchange for greater
cost and requirements. The signed and trusted certificate is the signed public key.
Verifying and releasing an SSL certificate passphrase
An SSL certificate cannot be applied for the SVP if the passphrase is set. If the
passphrase is set, release the passphrase for the SSL certificate before applying the SSL
certificate to the SVP. The following procedure explains how to verify and release the
passphrase settings.
Before you begin
■
A private key (.key file) has been created.
■
OpenSSL must be installed. In this procedure, it is installed in
C:\openssl
.
Procedure
1. Open a command prompt window with administrator permissions.
2. Move the current directory to the folder (for example,
C:\key
) where the key file is
stored, and run the following command:
Caution: Executing this command will overwrite the current key file. To
prevent loss of the key file, do one of the following:
■
Back up the key file first.
■
Use a different key file input destination and output destination.
C:\key>C:\openssl\bin\openssl rsa -in key-file-input-destination -out
key-file-output-destination
If
Enter pass phrase for server.key:
is displayed, the passphrase is set.
Enter the passphrase. The passphrase in the SSL private key will be released, and
the SSL certificate can be applied to the SVP.
Example (when passphrase is set)
C:\key>c:\openssl\bin\openssl rsa -in server.key -out server.key
Enter pass phrase for server.key: "Enter passphrase"
Writing RSA key
Example (when passphrase is not set)
C:\key>c:\openssl\bin\openssl rsa -in server.key –out server.key
Writing RSA key
Verifying and releasing an SSL certificate passphrase
Chapter 5: Setting up security
System Administrator Guide for VSP Gx00 models and VSP Fx00 models 150