If your current signed certificate has expired or is about to expire, you can request a
new signed certificate from a certificate
authority.
In the management GUI, select and select signed certificate and complete the form to create a request for a signed
certificate for your system. After you receive the certificate from the certificate authority, use
this panel to install the certificate on the system.
- In the command-line interface, enter the following command to create a new certificate request:
chsystemcert -mkrequest -keytype ecdsa521 -country GB -state Hampshire -locality Hursley -org MYCO -orgunit Storage -commonname svcsystem1.myco.com -email admin@myco.com
The
certificate request is automatically written to
/dumps/certificate.csr
- Use secure copy (scp) to copy the file /dumps/certificate.csr from the
system and send this file to a certificate authority (CA) to sign. The certificate authority returns
a signed certificate. After you receive the certificate, use scp to copy the certificate back onto
the system in the file /dumps/certificate.cer, where
certificate.cer is the name of the certificate.
- After you copy the certificate to the system, install the certificate on the system by entering
the following command:
chsystemcert -install -file /dumps/certificate.cer