Dell PowerVault ME4 Series Storage System CLI Guide

PDF

create certificate


Description	Creates or removes a custom security certificate. The storage system supports use of unique certificates for secure data communications, to authenticate that the expected storage systems are being managed. Use of authentication certificates applies to the HTTPS protocol, which is used by the web server in each controller module. The PowerVault Manager and SMI-S interfaces use the same certificate. After using this command you must restart each Management Controller to which the change is applied to have the change take effect
Minimum role	manage
Syntax	create certificate [a\|b\|both] [contents content-string] [noprompt] [restore] [unique]
Parameters	a\|b\|both Optional. Specifies whether to apply the change to controller A, B, or both. If this parameter is omitted, the change is applied to the controller being accessed. contents content-string Optional. A security certificate is generated based on the supplied content. The content becomes the subject of the certificate creation request and must be formatted as /type0=value0/type1=value1/type2=..., where types include C for country, ST for state or province, L for location, CN for common name, and O for organization. Invalid types will be omitted from the content string. The content string cannot exceed 1024 characters and can include printable UTF-8 characters except space or semicolon. An example is /C=US/ST=CO/O=MyOrganization/CN=www.mysite.com. You must specify either this parameter or the restore parameter or the unique parameter. noprompt Optional. Suppresses confirmation prompts. Specifying this parameter allows the command to proceed without user interaction. restore Optional. The system-generated certificate is restored and the custom certificate is discarded. The custom certificate may have been created with this CLI command or uploaded using SFTP or FTP. You must specify either this parameter or the contents parameter or the unique parameter. unique Optional. A security certificate is generated based on the system's serial number and other standard values. This certificate is installed, and the original certificate is archived. You must specify either this parameter or the contents parameter or the restore parameter.
Examples	Regenerate the system certificate with a new private key. # create certificate unique Create a custom certificate using a content string. # create certificate contents /C=US/ST=CO/L=NewYork/O=MyCompany/CN=www.mycompany.com Restore the system-generated certificate and remove the custom certificate. # create certificate restore
See also	restart mc restart sc show certificate