Create Self-Signed Ssl Certificate - Fujitsu ETERNUS DX60 S3 User Manual

Chapter 1 System Management
1.8 Network Management
3
Click the [Set] button.
 A confirmation screen appears.
4
Click the [OK] button.
 Setting of the SSH server key starts.
5
Click the [Done] button to return to the [Network] screen.
After setting the SSH server key, the information must be updated in the ETERNUS DX before being
accessed from ETERNUS CLI via the SSH connection. Log out from ETERNUS CLI and wait a few minutes
before logging in again.
1.8.15

Create Self-signed SSL Certificate

This function performs settings for creating the SSL server key and the self-signed SSL certificate to be used
when encrypting communication using Secure Socket Layer (SSL).
SSL is used when accessing from ETERNUS Web GUI via the HTTPS connection.
• The HTTPS connection from ETERNUS Web GUI is disabled in the factory settings.
• There are two types of SSL certificate formats: the "self-signed SSL certificate" and the "SSL server
certificate". The "self-signed SSL certificate" is created by using this function and the "SSL server
certificate" is created by using the procedure in
certificates in the ETERNUS DX when using the HTTPS connection.
• After the SSL server key and the self-signed SSL certificate have been created, the information must be
updated in the storage system before accessing from ETERNUS Web GUI via the HTTPS connection. Log
out from ETERNUS Web GUI and wait a few minutes before logging in again.
• The self-signed SSL certificate must be registered on the browser in the setting PC. Until the registration
has been completed, a warning message is displayed when accessing from ETERNUS Web GUI via the
HTTPS connection.
• Refer to "Appendix Installing the Security Certificate" in "FUJITSU Storage ETERNUS DX Configuration Guide
(Web GUI)" for procedure to install the self-signed SSL certificate.
• When using the key server for SED authentication key management, a self-signed SSL certificate or an
SSL server certificate is required to establish the communication between the ETERNUS DX and the key
server. These certificates are used as trusted SSL certificates of the ETERNUS DX. When using the key man-
agement server linkage function to manage the key, register the self-signed SSL certificate for the
ETERNUS DX. The created self-signed SSL certificate is transferred to the key server from the ETERNUS DX
when the key is updated. Refer to
For details on the parameters for this function, refer to
721).
For the factory default settings for this function, refer to
982).
"1.8.16 Create Key/CSR" (page
"1.11.8 Update SED Authentication Key" (page 176)
135
ETERNUS Web GUI User's Guide (Settings)
Copyright 2015 FUJITSU LIMITED
137). Register one of the
"A.1.7.13 Create Self-signed SSL Certificate" (page
"Appendix B Create Self-signed SSL Certificate" (page
End of procedure
for details.
P2X0-1270-13ENZ0