Dell PowerFlex Appliance with PowerFlex 4.x Administration Guide

Create and copy certificates

1. Log in to the primary MDM for each site using SSH to generate, copy and add certificates.
2. Type scli --login_certificate --p12_path /opt/emc/scaleio/mdm/cfg/cli_certificate.p12, and after the password prompt, enter the certificate password.
3. Extract the certificate for each site, type the following for each site (source and destination): scli --extract_root_ca --certificate_file /tmp/site-x.crt.
   For example, Site A replicates to both sites B and C:

   • Site A example: scli --extract_root_ca --certificate_file /tmp/site-a.crt
   • Site B example: scli --extract_root_ca --certificate_file /tmp/site-b.crt
   • Site C example: scli --extract_root_ca --certificate_file /tmp/site-c.crt
4. Copy the extracted certificate of the source Site A (primary MDM /tmp folder) to destination Site B (primary MDM /tmp folder) using SCP.
5. Copy the extracted certificate of the destination Site B (primary MDM /tmp folder) to source Site A (primary MDM /tmp folder) using SCP.
6. Copy the extracted certificate of the source Site A (primary MDM /tmp folder) to destination Site C (primary MDM /tmp folder) using SCP.
7. Copy the extracted certificate of the destination Site C (primary MDM /tmp folder) to source Site A (primary MDM /tmp folder) using SCP.
8. To add the copied certificate to the source and each destination, type scli --add_trusted_ca --certificate_file tmp/site-b.crt --comment site-x_crt.
   For example:

   • Site A example: scli --add_trusted_ca --certificate_file tmp/site-b.crt --comment site-b_crt and scli --add_trusted_ca --certificate_file tmp/site-c.crt --comment site-c_crt
   • Site B example: scli --add_trusted_ca --certificate_file tmp/site-a.crt --comment site-a_crt
   • Site C example: scli --add_trusted_ca --certificate_file tmp/site-a.crt --comment site-a_crt
9. To verify the new certificate, type scli --list_trusted_ca.