Dell PowerFlex v3.6.x Security Configuration Guide

Update certificate for PowerFlex presentation server

Import the CA certificates from the MDM to the PowerFlex presentation server.

1. Copy the root and intermediate CA certificate files inter-ca.pem.crt and root-ca.pem.crt to the server that is installed with the PowerFlex presentation server.
2. Run the following command for root and intermediate CA certificates and save the output:

   openssl x509 -noout -in root-ca.pem.crt -subject

   openssl x509 -noout -in inter-ca.pem.crt -subject

3. Run the keytool command to import the root and intermediate CA certificate from the MDM:

   keytool -import -trustcacerts -alias “<the subject you got as the output of the previous command>" -file /tmp/root-ca.pem.crt -keystore /etc/mgmt-server/.config/mdm-truststore.jks

   keytool -import -trustcacerts -alias "<the subject you got as the output of the previous command>" -file /tmp/inter-ca.pem.crt -keystore /etc/mgmt-server/.config/mdm-truststore.jks

   -alias refers to a unique alias in the truststore, and -file is the path to the trusted/root certificate. It is recommended to use the certificates' subject for the alias.

   Example:

   keytool -import -trustcacerts -alias "/C=AU/ST=CA/L=CA/O=CA/OU=CA/CN=CA/emailAddress=tom.smith@dell.com" -file /tmp/root-ca.pem.crt -keystore /etc/mgmt-server/.config/mdm-truststore.jks

   keytool -import -trustcacerts -alias "/C=AU/ST=CA/O=CA/OU=CA/CN=CA/emailAddress=tom.smith@dell.com" -file /tmp/inter-ca.pem.crt -keystore /etc/mgmt-server/.config/mdm-truststore.jks

4. Restart the PowerFlex presentation server:

   service mgmt-server restart

   NOTE: For RHEL6.10, use the command initctl restart mgmt-server.