EMC® VNX® Series Security Configuration Guide for VNX

$ server_certificate <movername> -persona -generate
     {<persona_name>|id=<persona_id>} -key_size <bits>
     {-cn|-common_name} <common_name> -ou <org_unit>
-organization <organization> -location <location>
  -state <state> -country <country> -filename <output_path>

where:

<movername> = name of the physical Data Mover with which the persona is associated.

<persona_name> = name of the persona.

<persona_id> = ID of the persona. The ID is generated when the persona is created. You can determine the ID through the -persona -list command.

<bits> = key size, either 2048 or 4096 bits.

<common_name> = commonly used name, typically a hostname that describes the Data Mover with which the persona is associated. If the name includes any special characters (such as a semi-colon, space character, or exclamation), it must be enclosed in quotation marks.

<org_unit> = name of the organizational unit. If the name includes any special characters (such as a semi-colon, space character, or exclamation), it must be enclosed in quotation marks.

<organization> = name of the organization.

<location> = physical location of the organization.

<state> = state where the organization is located.

<country> = country where the organization is located.

<output_path> = name and path where the generated request are written.

Example:

To generate a key set and request for a certificate signed by an external CA, specifying detailed information about the Data Mover and saving the certificate request to a specific file, type:

$ server_certificate server_2 -persona -generate default -key_size 4096 -cn ‘name;1.2.3.4’ -ou ‘my.org;my dept’ -organization EMC -location Hopkinton -state MA -country US -filename /tmp/server_2.1.request.pem

Output:

server_2 : 
Starting key generation. This could take a long time ...
done