Dell PowerVault ME5 Series Storage System CLI Reference Guide

Creates a new certificate signing request or removes a custom security certificate.

The storage system supports use of unique certificates for secure data communications, to authenticate that the expected storage systems are being managed. Use of authentication certificates applies to the HTTPS protocol, which is used by the web server in each controller module. This command allows creation of a certificate signing request to generate a new certificate.

After using this command to restore the default certificate you must restart each Management Controller to which the change is applied to have the change take effect.

create certificate-signing-request

[a|b|both]

[subject <content-string>]

[noprompt]

[restore]

[extension <extension-string>]

a|b|both

Optional. Specifies whether to apply the change to controller A, B, or both. If this parameter is omitted, the change is applied to the controller being accessed.

subject <content-string>

Optional. A security certificate is generated based on the supplied content. The content becomes the subject of the certificate

creation request and must be formatted as /type0=value0/type1=value1/type2=..., where types include Cf or country, ST for state or province, L for location, CN for common name, and O for organization. Invalid types will be omitted from the content string. The content string cannot exceed 1024 characters and can include printable UTF-8 characters except space or semicolon. An example is /C=US/ST=CO/O=MyOrganization/CN=www.mysite.com. You must specify either this parameter or the restore parameter.

noprompt

Optional. Suppresses confirmation prompts. Specifying this parameter allows the command to proceed without user interaction.

restore

Optional. The system-generated certificate is restored and the custom certificate is discarded. The custom certificate may have been created with this CLI command or uploaded using SFTP or FTP. You must specify either this parameter or the subject parameter.

extension

Optional. This field adds extension parameters to the CSR if requested by the user. The extension string cannot exceed 1024 characters and can include printable UTF-8 characters except space or semicolon.

An example is /basicConstraints=CA:FALSE/extendedKeyUsage=clientAuth,serverAuth.

# create certificate-signing-request subject /C=US/ST=CO/L=NewYork/O=MyCompany/CN=www.mycompany.com

Restore the system-generated certificate and remove the custom certificate.

# create certificate-signing-request restore

restart mc

restart sc

show certificate