3.
In the folder where the .bat
file
is located, execute the following command:
C:\MAPP\wk\Supervisor\MappIniSet>MappApacheCrtUpdate.bat
absolute-path-of-signed-public-key-certification-file
absolute-
path-of-private-key-file
Note:
A space is required between MappApacheCrtUpdate.bat and the signed
public key
certification
file
path.
A space is required between the signed public key
certification
file
path
and the private key
file
path.
4.
A completion message box displays. Press any key to acknowledge the message and
close the message box.
5.
Close the command prompt window.
Notes on updating a signed certificate for the service processor
The following notes provide additional information about updating a signed
certificate.
■
While the service processor
certificate
is being updated, tasks that are being run or
scheduled to run on Device Manager - Storage Navigator are not executed.
■
Certificates
for RMI communication are updated asynchronously. The process takes
about two minutes.
■
If the service processor
certificate
is updated while Hitachi Command Suite is being
set up, the setup operation will fail.
■
Updating the SSL
certificate
might change the system drastically and may lead to
service processor failure. Therefore take
sufficient
care to consider the content of the
certificate
and private key to be set.
■
After the
certificate
update is complete, depending on the environment, the service
processor can take 30 to 60 minutes to restart.
Returning the certificate to default
You can return the
certificate
that was updated by the procedure in
back to default.
Before you begin
■
You must have the Storage Administrator (Initial
Configuration)
role to perform this
task.
■
You must be logged into the SVP.
■
A private key (.key
file)
has been created. Make sure that the
file
name is
server.key
.
Creating a private key (on page 147)
.
■
The passphrase for the private key (server.key
file)
is released.
■
A signed public key
certificate
(.crt
file)
has been acquired. Make sure that the
file
name is
server.crt
. See
Creating a public key (on page 148)
■
The private key (.key
file)
must be in PEM format. You cannot use DER format.
■
The signed public key
certificate
(.crt
file)
must be in X509 PEM format. You cannot use
X509 DER format. See
.
Notes on updating a signed
certificate
for the service processor
Chapter 5: Setting up security
System Administrator Guide for VSP Gx00 models and VSP Fx00 models
152
Содержание Virtual Storage Platform F400
Страница 18: ......
Страница 30: ...Chapter 1 System administration overview System Administrator Guide for VSP Gx00 models and VSP Fx00 models 30 ...
Страница 202: ...Chapter 8 Configuring audit logs System Administrator Guide for VSP Gx00 models and VSP Fx00 models 202 ...
Страница 362: ...Glossary System Administrator Guide for VSP Gx00 models and VSP Fx00 models 362 ...
Страница 367: ......