Document toolboxDocument toolbox

Installing HTTPS Certificate

Owned by Viktoryia Varapayeva (Deactivated)
Last updated: Aug 25, 2022
1 min read

This process involves two tasks: Generating the CSR and sending it to the CA, and importing the new certificate from the CA.

To install an HTTPS certificate, perform the following:

  1. Using SSH or SCP, connect to the NetMRI administrative shell and then run the configure certificates command.
  2. When prompted to select the certificate type, select https.
  3. When prompted for an action, choose 1. Generate CSR.
  4. When prompted to enter information for the CSR, the only required field is Common Name. You must enter the IP address or hostname of the NetMRI appliance. All other fields are optional.
  5. When the appliance generates the CSR, copy the text, as shown in the example, and paste it into the Certificate Request page of the site from which you are requesting a certificate.

-----BEGIN CERTIFICATE REQUEST-----

MIIC5zCCAc8CAQAwZDELMAkGA1UEBhMCR0IxEjAQBgNVBAgTCUJlcmtzaGlyZTEQ

MA4GA1UEBxMHTmV3YnVyeTEXMBUGA1UEChMOTXkgQ29tcGFueSBMdGQxFjAUBgNV

BAMTDTE3Mi4yMy4yNy4xOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB

AQDCUvDcvohVWY7tWJo/9D1Olkc9u/nXCpzdhkB1t+hPnY4b1uInhLvcJATqM6u4

kmPIqxCLFfuR3x2RYaiWiayHQP0VxUlz46UNeTPiHM8xdpX1yrclBLMfvBypZW4C

ptKgKhrn1bUV4v8qilGCkPUUICS82jSdFcSVp6pSnkfKIst+pecoX9C5jkIH/p7E

t1xXkJ2HUl92+S59o/Y0/B3V+MrBh9fy/enormcMX9dfjqJHK8FCSjezYw8TFO5V

Dz0Wf31vtQ7WD50aALDJX1gmwna0WdtDyEd2lp2XV/zFvg6eo6W+q9Wbfq+dewBA

FXXudk8ZEVICQOeRS4lRrF/jAgMBAAGgPjA8BgkqhkiG9w0BCQ4xLzAtMAkGA1Ud
----END CERTIFICATE REQUEST-----

When you receive the CA-signed certificate, upload it to the appliance and activate it. Note that the certificate must be in PEM format and the file must have a .crt extension.

6. On the Settings icon > General Settings > Security page, click the NetMRI HTTPS Settings tab.

7. In the HTTP Certificate section, click Upload. A message dialog appears stating the following: "The NetMRI HTTP and HTTPS server settings are about to be updated and the web server restarted. If the NetMRI web server becomes inaccessible as a result of these changes, login to the NetMRI admin shell using SSH and run the command configure http to update the web server settings. Do you wish to proceed?"

8. Click Yes.

9. In the Upload dialog box, click Browse. For the .PEM-format certificate file, select the respective file and then click Upload. The HTTPS Certificate section updates with the new information.