Dell PowerVault ME5 Series Administrator's Guide

Install a security certificate

Perform the following steps to install a security certificate:

1. In the PowerVault Manager, prepare to use FTP/SFTP:
   1. Determine the network-port IP addresses of the system controllers. See Configuring controller network ports.
   2. Verify that the FTP/SFTP service is enabled on the system. See Enabling or disabling system-management settings.
   3. Verify that the user you will log in as has permission to use the FTP interface. See Managing local users.
2. Open a Command Prompt (Windows) or a terminal window (UNIX) and go to the directory that contains the certificate files.
3. Enter:
   sftp -P port controller-network-address or

   ftp controller-network-address

   For example:

   sftp -P 1022 10.235.216.152 or

   ftp 10.1.0.9

4. Log in as a user with manage role permissions and FTP/SFTP interface permissions.
5. Make sure the client is in binary transfer mode. Enter:
   binary
6. Enter:
   put <certificate-file-name> cert-[file:[usr|file://[usr/]|mfg|trust] where,
   • <certificate-file-name> is the name of the certificate file, [usr|mfg|trust] is the certificate type
   • usr: Device/server certificate uploaded by end user
   • -mfg: Default device/server certificate uploaded during production/manufacturing
   • trust: Trusted intermediate or root certificate
   NOTE:The default typeis usr.
7. Enter:
   put key-file-name cert-key-file:{usr |mfg}

   where key-file-name is the name of the security key file for your specific system.

8. Restart both Management Controllers to have the new security device/server certificate take effect.
9. From the CLI, run 'show certificate' to view the new certificate.
   The new certificate is not active until the Management controller has restarted http/s server and SMIS.
10. Log out and then log in again.
11. The new security certificate takes effect.