Hitachi Virtual Storage Platform F400, System Administrator Manual, Page: 151 / 368

Converting SSL certificates to PKCS#12 format
Follow these instructions when converting SSL certificates to PKCS#12 format.
If you are uploading a created private key and the SSL certificate, you need to convert it
to PKCS#12 format. If you are not uploading SSL certificate, conversion is not required.
Before you begin
■
You must store a private key and SSL certificate in the same folder.
■
In the following procedure:
●
The private key file name is “client.key”.
●
The SSL certificate file name is “client.crt”.
●
The SSL certificate in PKCS#12 format is output to c:\key.
Procedure
1. Open a command prompt with administrator permissions.
2. Enter the following command:
C:key>c:\openssl\bin\openssl pkcs12 -
export -in client.crt –inkey client.key -out client.p12
3. Enter a password, which is used when uploading the SSL certificate in PKCS#12
format. You can use up to 128 alphanumeric characters and the following symbols: !
# $ % & ' ( ) * + , - . / : ; < = > ? @ [ \ ] ^ _ ` { | } ~
4. The
client.p12
file is created in the
C:\key
folder. This
client.p12
file is the
SSL certificate in PKCS#12 format.
5. Close the command prompt.
Updating a signed certificate
To use SSL-encrypted communication, you must update and upload the private key and
the signed server certificate (public key) to the SVP.
Before you begin
■
You must have the Storage Administrator (Initial Configuration) role to perform this
task.
■
You must be logged into the SVP.
■
A private key (.key file) has been created. Make sure that the file name is
server.key
.
■
The passphrase for the private key (server.key file) is released.
■
A signed public key certificate (.crt file) has been acquired. Make sure that the file
name is
server.crt
.
■
The private key (.key file) must be in PEM format. You cannot use DER format.
■
The signed public key certificate (.crt file) must be in X509 PEM format. You cannot use
X509 DER format.
■
The passphrase for the private key (server.key file) must be released.
Procedure
1. Close all Device Manager - Storage Navigator sessions on the SVP.
2. Open a command prompt window with administrator permissions.
Converting SSL certificates to PKCS#12 format
Chapter 5: Setting up security
System Administrator Guide for VSP Gx00 models and VSP Fx00 models 151