ExtraHop Trace Admin UI, Руководство пользователя, Страница: 21 / 58

ExtraHop 8.8 ExtraHop Trace Admin UI Guide 21
4. In the Subject Alternative Names section, type the DNS name of the ExtraHop system. You can add
multiple DNS names and IP addresses to be protected by a single SSL Certificate.
5. In the Subject section, complete the following fields. Only the Common Name field is required.
Field Description Examples
Common Name The fully qualified domain name
(FQDN) of the ExtraHop system.
The FQDN must match one of
the Subject Alternative Names.
*.example.com
discover.example.com
E-mail Address The email address of the primary
contact for your organization.
webmaster@example.com
Organizational Unit The division of your organization
handling the certificate.
IT Department
Organization The legal name of your
organization. This entry should
not be abbreviated and should
include suffixes such as Inc,
Corp, or LLC.
Example, Inc.
Locality/City The city where your organization
is located.
Seattle
State/Province The state or province where
your organization is located. This
entry should not be abbreviated.
Washington
Country Code The two-letter ISO code for the
country where your organization
is located.
US
6. Click Export . The CSR file is automatically downloaded to your computer.
Next steps
Send the CSR file to your certificate authority (CA) to have the CSR signed. When you receive the SSL
certificate from the CA, return to the SSL Certificate page in the Administration settings and upload the
certificate to the ExtraHop system.
Tip: If your organization requires that the CSR contains a new public key, generate a self-signed
certificate to create new key pairs before creating the CSR.
Trusted Certificates
Trusted certificates enable you to validate SMTP, LDAP, HTTPS ODS and MongoDB ODS targets, as well as
Splunk recordstore connections from your ExtraHop system.
Add a trusted certificate to your ExtraHop system
Your ExtraHop system only trusts peers who present a Transport Layer Security (TLS) certificate that is
signed by one of the built-in system certificates and any certificates that you upload. SMTP, LDAP, HTTPS
ODS and MongoDB ODS targets, as well as Splunk recordstore connections can be validated through these
certificates.
Before you begin
You must log in as a user with unlimited privileges to add or remove trusted certificates.