Dot Hill Systems AssuredSAN 6004, Справочное руководство CLI, Страница: 35 / 363

create certificate 35
create certificate
Description Creates or removes a custom security certificate.
The storage system supports use of unique certificates for secure data communications, to
authenticate that the expected storage systems are being managed. Use of authentication certificates
applies to the HTTPS protocol, which is used by the web server in each controller module.
After using this command you must restart the system's Management Controllers to have the change
take effect.
Min. role
manage
Syntax
create certificate
[a|b|both]
[contents content-string ]
[noprompt]
[restore]
[unique]
Parameters
a|b|both
Optional. Specifies whether to apply the change to controller A, B, or both. If this parameter is
omitted, the change is applied to the controller being accessed.
contents content-string
Optional. A security certificate is generated based on the supplied content. The content becomes the
subject of the certificate creation request and must be formatted as
/type0=value0/type1=value1/type2=...
, where types include
CO
for country,
ST
for state
or province,
L
for location,
CN
for common name, and
O
for organization. The content string cannot
exceed 1024 characters and can include printable UTF-8 characters except space or semicolon. An
example is
/CO=US/ST=CO/O=MyOrganization/CN=www.mysite.com
. You must specify
either this parameter or the
restore
parameter or the
unique
parameter.
noprompt
Optional in console format; required for XML API format. Suppresses the confirmation prompt, which
requires a response. Specifying this parameter allows the command to proceed without user
interaction.
restore
Optional. The system-generated certificate is restored and the custom certificate is discarded. The
custom certificate may have been created with this CLI command or uploaded using FTP. You must
specify either this parameter or the
contents
parameter or the
unique
parameter.
unique
Optional. A security certificate is generated based on the system's serial number and other standard
values. This certificate is installed, and the original certificate is archived. You must specify either this
parameter or the
contents
parameter or the
restore
parameter.
Example Regenerate the system certificate with a new private key.
# create certificate unique
Create a custom certificate using a content string.
# create certificate contents /CO=US/ST=CO/L=NewYork/O=MyCompany/CN=
www.mycompany.com
Restore the system-generated certificate and remove the custom certificate.
# create certificate restore
See also • restart mc
• restart sc
• show certificate