Providing an SSL Certificate
469
Titan SiliconServer
2.
Copy-and-paste the CSR that was displayed after step 1. That data should be provided
to the Certificate Authority.
Alternatively, the same information may be copied off the SMU via the file:
/var/cache/SMU/certreq.csr
.
Acquiring a SSL Certificate from a Certificate Authority (CA)
At this point, the CSR can be submitted to a Certificate Authority such as Verisign, Thwate,
etc. The details of how to do this are beyond the scope of this document.
When acquiring a certificate from a CA has been completed, move ahead to the section
Installing and Managing Certificates
.
Installing and Managing Certificates
Once a certificate has been obtained from the CA, follow the instructions below to install it.
To Install a Certificate
First, copy the certificate provided by the CA to the SMU (for example, scp to /home/manager/
server.cer). If necessary, also provide the CA’s Trusted Certificate Chain as a file (e.g. /home/
manager/veritas.pem). The SMU already includes popular CA Trust Chains, so step 2 may
typically be skipped. To view these popular CA’s, see Sun’s documentation:
http://java.sun.com/j2se/1.5.0/docs/tooldocs/solaris/keytool.html#cacerts
Note:
The content of the certificate and trust chain files should only start
with "
-----BEGIN" and end with "-----END CERTIFICATE-----
".
1.
Log onto SMU (through
ssh
or it is serial port) as user manager.
2.
First, import the CA’s Trusted Certificate Chain; this may require multiple files/chains,
so repeat as necessary:
sudo cert-importtrustchain.sh <path to trust chain file> <unique alias>
When prompted, enter the manager user’s password.
An example Intermediate CA trust chain may be found at:
http://www.verisign.com/support/install2/intermediate.html
Note:
Any alias may be used so long as it’s unique. If the alias already
exists, you will be prompted to replace the old certificate or cancel the
import.
3.
Next, the signed “Certificate Reply” from the CA may imported (replacing the default
SMU SSL certificate):
sudo cert-importcert.sh <path to cert file>
Содержание Titan SiliconServer
Страница 1: ...Titan SiliconServer System Administration Manual ...
Страница 12: ...Table of Contents xii Titan SiliconServer ...
Страница 308: ...File Services 296 Titan SiliconServer 4 Click OK To access available iSCSI Targets 1 Click on the Available Targets tab ...
Страница 411: ...Status Monitoring 399 Titan SiliconServer 3 Click details ...