EMC® VNX® Series Security Configuration Guide for VNX

$ server_certificate <movername> -persona -generate
      {<persona_name>|id=<persona_id>} -key_size <bits>
-cs_sign_duration <# of months>{-cn|-common_name} <common_name>

where:

<movername> = name of the physical Data Mover with which the persona is associated.

<persona_name> = name of the persona.

<persona_id> = ID of the persona. The ID is generated when the persona is created. You can determine the ID through the -persona -list command.

<bits> = key size, either 2048 or 4096 bits.

<# of months> = number of months the certificate is valid.

<common_name> = commonly used name, typically a hostname that describes the Data Mover with which the persona is associated. If the name includes any special characters (such as a semi-colon, space character, or exclamation), it must be enclosed in quotation marks.

Example:

To generate a key set and request for a certificate to be signed by the Control Station, type:

$ server_certificate server_2 -persona -generate default -key_size 4096 -cs_sign_duration 13 -cn ‘name;1.2.3.4’

Output:

server_2 : 
Starting key generation. This could take a long time ...
done