Install A Security Certificate And Authentication Key - Spectra Logic Spectra T950V User Manual

Chapter 4 — Configuring the Library

Install a Security Certificate and Authentication Key

If you enabled SSL (see Enable SSL on page 103), use the following steps to
obtain and install a security certificate and private key.
Note:
1. Obtain a security certificate and private key using one of the following
The ssl.crt and ssl.key files can only contain ONE certification or key. The BlueScale
Important
software does not support multiple keys (chaining keys) in the key or certificate
files. If there are multiple keys in the files, they are all considered invalid.
When generating a self signed certificate using openssl, use the -x509 command
Important
line option. Loading a file without this option may cause the LCM to hang.
When generating a self signed certificate or a certificate signing request using
Important
openssl, use the -nodes command line option to prevent the key from being
encrypted.
August 2019
Beginning with BlueScale 12.7.06.01, the library uses TLS 1.2.
methods:
 Create a Self‐Signed Certificate
For example, to create a self‐signed certificate and authentication
key using openssl, use the following command.
openssl req ‐x509 ‐nodes ‐days 365 
‐newkey rsa:2048 ‐keyout ssl.key ‐out ssl.crt
The openssl req command is a certificate request and certificate
generating utility. The following parameters are used in the
example:
 ‐x509 ‐ This option outputs a self signed certificate instead of a
certificate request.
 ‐nodes ‐ This option specifies that the private key not be
encrypted.
 ‐days n ‐ When the ‐x509 option is also used, this option specifies
the number of days (n) that the certificate is valid.
 ‐newkey rsa:nbits ‐ Generates an RSA key nbits in size. The
Library supports RSA keys in bits of 512, 768, 1024 and 2048.
 ‐keyout filename ‐ This option specifies the private key file
name.
 ‐out filename ‐ This option specifies the certificate file name.
After entering the command, you are prompted to provide the
following information. Sample responses are shown.
 Country Name (2 letter code) [AU]: US
 State or Province Name (full name) [Some‐State]: Colorado
 Locality Name (eg, city) []: Boulder
 Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Spectra Logic
Configuring Optional Library Settings
User Guide—Spectra T950V Library
113